8.8
High
CVE-2020-13545 An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker…
Description
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based memory corruption. An attacker can entice the victim to open a document to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Softmaker | Versions not published |
Other CVEs of Softmaker
The 10 CVEs of Softmaker →
CVE-2020-28587
A specially crafted document can cause the document parser to copy data from a particular record type into a…
8.8
High
CVE-2020-27250
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the…
8.8
High
CVE-2020-13581
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the…
8.8
High
CVE-2020-13546
In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the…
8.8
High