Skip to content
OpenAdvisories
High · 7.8 CVE-2019-9135 EUVD-2019-18519GHSA-jhx8-jg6w-gwhp

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file …

Published Apr 25, 2019 · Updated Aug 4, 2024 · Assigned by krcert

Description

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed DIB format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

VendorProductAffectedFixed
HumanTalk Co,Ltd DaviewIndy fixed in 8.98.8 —

References