Skip to content
OpenAdvisories
High · 8.8 CVE-2018-3923 EUVD-2018-15709GHSA-vj96-2j79-33vc

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image p…

Published Aug 1, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.

Affected products

VendorProductAffectedFixed
Computerinsel Computerinsel Photoline Computerinsel Photoline 20.54 for OS X —

References