Skip to content
OpenAdvisories
High · 8.8 CVE-2019-5030 EUVD-2019-14637GHSA-fj7v-mvq5-ffj5

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 …

Published Oct 31, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 (7,0,2019,0220). While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds corresponding to the number of style levels, causing a vtable pointer to be overwritten, which leads to code execution.

Affected products

VendorProductAffectedFixed
— Antenna House Antenna House Rainbow PDF Office Server Document Converter v7.0 Pro MR1 for Linux64 (7,0,2019,0220) —

References