CVE-2018-18446

dotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).
References
Link Resource
https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ Release Notes Vendor Advisory
https://www.dotpdn.com Vendor Advisory
https://www.getpaint.net Product Vendor Advisory
https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ Release Notes Vendor Advisory
https://www.dotpdn.com Vendor Advisory
https://www.getpaint.net Product Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dotpdn:paint.net:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:55

Type Values Removed Values Added
References () https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ - Release Notes, Vendor Advisory () https://blog.getpaint.net/2018/10/22/paint-net-4-1-2-is-now-available/ - Release Notes, Vendor Advisory
References () https://www.dotpdn.com - Vendor Advisory () https://www.dotpdn.com - Vendor Advisory
References () https://www.getpaint.net - Product, Vendor Advisory () https://www.getpaint.net - Product, Vendor Advisory

Information

Published : 2022-10-12 21:15

Updated : 2024-11-21 03:55


NVD link : CVE-2018-18446

Mitre link : CVE-2018-18446

CVE.ORG link : CVE-2018-18446


JSON object : View

Products Affected

dotpdn

  • paint.net
CWE
CWE-502

Deserialization of Untrusted Data