CVE-2017-2920 An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, wh...
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pl32 photoline | = 20.02 | No fix listed |
| Talos Computerinsel Photoline | = 20.02 | No fix listed |
References
- 101186 broken-link vdb-entry
- github.com patch third-party-advisory
- GLSA-201908-26 third-party-advisory vendor-advisory
- www.talosintelligence.com exploit technical-description third-party-advisory