Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2020-7816

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HUMAN TALK DaView Indy, DaVA+, DaOffice

  • unspecified to ≤ v8.995affected

References