Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2019-9136

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. At

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

DaviewIndy 8.98.7 and earlier versions have a Heap-based overflow vulnerability, triggered when the user opens a malformed JPEG2000 format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HumanTalk Co,Ltd DaviewIndy

  • fixed in 8.98.8affected

References