CVE-2017-12106
HighSummary
A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution.
Risk Assessment
An attacker can exploit this vulnerability by sending a specifically crafted .TGA file, which poses a risk of unauthorized access to the system.
Recommendation
It is recommended to update Computerinsel Photoline to the latest version to mitigate this vulnerability and to monitor the system for suspicious .TGA files.
Other vulnerabilities in Computerinsel Photoline 20.02
See all- CVE-2017-2920High
A memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution.
- CVE-2017-2880High
A memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution.
Original NVD description (English source)
A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability.