An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/106809 | vdb entry third party advisory broken link |
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0651 | not applicable exploit third party advisory |
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0649 | exploit third party advisory technical description |