Skip to content
OpenAdvisories
High · 8.8 CVE-2019-5089 EUVD-2019-14694GHSA-8c78-qwfr-hr2w

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file ca…

Published Nov 5, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file can cause an out-of-bounds memory write, allowing an attacker to execute arbitrary code on the victim machine. An attacker could exploit a vulnerability by providing the user with a specially crafted JPEG file.

Affected products

VendorProductAffectedFixed
Investintech Able2Extract Professional 14.0.7 x64 —

References