CVE-2019-5089

HIGH 7.8CVE-2019-5089 · Published 05/11/2019 · updated 17/06/2026

In short

CVE-2019-5089 is a HIGH (CVSS 7.8) vulnerability affecting able2extract (investintech).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
able2extract investintech	`= 14.0.7`	No fix yet

Description

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 4.0.7 x64. A specially crafted JPEG file can cause an out-of-bounds memory write, allowing an attacker to execute arbitrary code on the victim machine. An attacker could exploit a vulnerability by providing the user with a specially crafted JPEG file.

References

talosintelligence.com/vulnerability_reports/TALOS-2019-0881 · Exploit

More vulnerabilities in able2extract

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free