Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7828 EUVD-2020-28760GHSA-946x-5j76-f99g

DaviewIndy Heap-based Buffer Overflow Vulnerability

Published Jul 30, 2020 · Updated Aug 4, 2024 · Assigned by krcert

Description

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

VendorProductAffectedFixed
HumanTalk DavieIndy 8.98.4 – ≤ 8.98.7 —

References