PT-2019-17961 · Corel · Corel Paintshop Pro

Published 2019-06-19 · Updated 2019-06-19 · CVE-2019-6114

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Corel PaintShop Pro 2019 version 21.0.0.119

Description An issue was discovered that allows an attacker to overwrite memory and execute arbitrary code due to an integer overflow in the jp2 parsing library.

Recommendations For Corel PaintShop Pro 2019 version 21.0.0.119, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2019-6114

Affected Products

Corel Paintshop Pro

References · 3

• 🔥 https://github.com/ereisr00/bagofbugz/tree/master/CorelPaintShop2019 · Exploit
• https://osv.dev/vulnerability/CVE-2019-6114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6114 · Security Note