Skip to content
OpenAdvisories
High · 7.8 CVE-2019-9137 EUVD-2019-18521GHSA-c8pj-xcf4-vhc8

DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is …

Published Apr 25, 2019 · Updated Aug 4, 2024 · Assigned by krcert

Description

DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

VendorProductAffectedFixed
HumanTalk Co,Ltd DaviewIndy fixed in 8.98.8 —

References