CVE-2020-7828

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:hmtalk:daviewindy:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:37

Type Values Removed Values Added
References () https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35539 - Third Party Advisory () https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35539 - Third Party Advisory

Information

Published : 2020-07-30 14:15

Updated : 2024-11-21 05:37


NVD link : CVE-2020-7828

Mitre link : CVE-2020-7828

CVE.ORG link : CVE-2020-7828


JSON object : View

Products Affected

microsoft

  • windows

hmtalk

  • daviewindy
CWE
CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write