Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7829 EUVD-2020-28761GHSA-38mw-39hm-59rm

DaviewIndy Heap-based Buffer Overflow Vulnerability

Published Jul 30, 2020 · Updated Aug 4, 2024 · Assigned by krcert

Description

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

VendorProductAffectedFixed
HumanTalk DavieIndy 8.98.4 – ≤ 8.98.7 —

References