Skip to content
OpenAdvisories
High · 7.0 CVE-2020-7816 EUVD-2020-28748GHSA-grqg-fgw9-3xch

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker …

Published Jun 30, 2020 · Updated Sep 17, 2024 · Assigned by krcert

Description

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.

Affected products

VendorProductAffectedFixed
HUMAN TALK DaView Indy, DaVA+, DaOffice unspecified – ≤ v8.995 —

References