8.8
Élevée
CVE-2020-13545 An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker…
Description
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based memory corruption. An attacker can entice the victim to open a document to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Softmaker | Versions non publiées |
Références
- talosintelligence.com talosintelligence.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Softmaker
Les 10 CVE de Softmaker →
CVE-2020-28587
A specially crafted document can cause the document parser to copy data from a particular record type into a…
8.8
Élevée
CVE-2020-27250
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the…
8.8
Élevée
CVE-2020-13581
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the…
8.8
Élevée
CVE-2020-13546
In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the…
8.8
Élevée