CVE-2017-2920
HighSummary
A memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution.
Risk Assessment
An attacker can send a specific .SVG file to trigger this vulnerability, posing a risk of arbitrary code execution on the victim's system. This can lead to serious security implications for the organization.
Recommendation
It is recommended to update Computerinsel Photoline to the latest version to mitigate this vulnerability. Additionally, monitor and restrict the ability to open .SVG files from untrusted sources.
Other vulnerabilities in Computerinsel Photoline 20.02
See all- CVE-2017-2880High
A memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution.
- CVE-2017-12106High
A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution.
Original NVD description (English source)
An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability.