Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-7827

DaviewIndy Use-After-Free Vulnerability

Description

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HumanTalk DavieIndy

  • 8.98.7 to ≤ 8.98.8affected

References