CVE-2019-5088

HIGH 7.8CVE-2019-5088 · Published 05/11/2019 · updated 17/06/2026

In short

CVE-2019-5088 is a HIGH (CVSS 7.8) vulnerability affecting able2extract (investintech).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
able2extract investintech	`= 14.0.7`	No fix yet

Description

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file can cause an out-of-bounds memory write, allowing a potential attacker to execute arbitrary code on the victim machine. Can trigger this vulnerability by sending the user a specially crafted BMP file.

References

talosintelligence.com/vulnerability_reports/TALOS-2019-0880 · Exploit

More vulnerabilities in able2extract

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free