Skip to content
OpenAdvisories
High · 8.8 CVE-2019-5088 EUVD-2019-14693GHSA-gc33-q873-wgh6

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file ca…

Published Nov 5, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file can cause an out-of-bounds memory write, allowing a potential attacker to execute arbitrary code on the victim machine. Can trigger this vulnerability by sending the user a specially crafted BMP file.

Affected products

VendorProductAffectedFixed
Investintech.com Able2Extract Professional 14.0.7 x64 —

References