CVE-2018-18447 dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dotpdn paint.net | < 4.1.2 | 4.1.2 |
References
- blog.getpaint.net release-notes vendor-advisory
- www.dotpdn.com vendor-advisory
- www.getpaint.net product vendor-advisory