Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-7872

DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers c

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HumanTalk DaviewIndy

  • 8.98.7.0 and prior to < 8.98.8.0affected

References