cve/2020/CVE-2020-7816.md

19 lines
916 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2020-7816](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7816)
![](https://img.shields.io/static/v1?label=Product&message=DaView%20Indy%2C%20DaVA%2B%2C%20DaOffice&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%3D%20v8.995%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Stack-based%20Buffer%20Overflow&color=brighgreen)
### Description
A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/0xCyberY/CVE-T4PDF
- https://github.com/ARPSyndicate/cvemon