| |
Vulnerability CVE-2022-23400
Published: 2022-05-03
Description: |
A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability. |
Type:
CWE-787
CVSS2 => (AV:N/AC:M/Au:N/C:P/I:N/A:P)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5.8/10 |
4.9/10 |
8.6/10 |
Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
Partial |
References: |
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1465
|
|
|
closedb();
?>
Copyright 2024, cxsecurity.com
|
|
|