Skip to content
OpenAdvisories
High · 8.8 CVE-2018-3922 EUVD-2018-15708GHSA-qfh6-6555-jhr4

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image p…

Published Aug 1, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and gain code execution.

Affected products

VendorProductAffectedFixed
Computerinsel Computerinsel Photoline Computerinsel Photoline 20.54 for OS X —

References