CVE-2018-3922
01.08.2018, 15:29
A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and gain code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pl32 | photoline | 20.54 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration