CVE-2008-5937 AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp) file with large height and width values.
HighCVSS 7.8
EPSS 2.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp) file with large height and width values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zkesoft ayeview | = 2.20 | No fix listed |
References
- 4939 third-party-advisory
- ayeview-bitmap-dos(48183) vdb-entry
- 6672 exploit