dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
References
Link | Resource |
---|---|
https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ | Release Notes Vendor Advisory |
https://www.dotpdn.com | Vendor Advisory |
https://www.getpaint.net | Product Vendor Advisory |
https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ | Release Notes Vendor Advisory |
https://www.dotpdn.com | Vendor Advisory |
https://www.getpaint.net | Product Vendor Advisory |
Configurations
History
21 Nov 2024, 03:55
Type | Values Removed | Values Added |
---|---|---|
References | () https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ - Release Notes, Vendor Advisory | |
References | () https://www.dotpdn.com - Vendor Advisory | |
References | () https://www.getpaint.net - Product, Vendor Advisory |
Information
Published : 2022-10-12 21:15
Updated : 2024-11-21 03:55
NVD link : CVE-2018-18446
Mitre link : CVE-2018-18446
CVE.ORG link : CVE-2018-18446
JSON object : View
Products Affected
dotpdn
- paint.net
CWE
CWE-502
Deserialization of Untrusted Data