PT-2019-17961 · Corel · Corel Paintshop Pro

Publicado 2019-06-19 · Atualizado 2019-06-19 · CVE-2019-6114

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Corel PaintShop Pro 2019 version 21.0.0.119

Description An issue was discovered that allows an attacker to overwrite memory and execute arbitrary code due to an integer overflow in the jp2 parsing library.

Recommendations For Corel PaintShop Pro 2019 version 21.0.0.119, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2019-6114

Produtos afetados

Corel Paintshop Pro

Referências · 3

• 🔥 https://github.com/ereisr00/bagofbugz/tree/master/CorelPaintShop2019 · Exploit
• https://osv.dev/vulnerability/CVE-2019-6114 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6114 · Nota de Segurança