CVE-2019-5088

ALTO 7.8CVE-2019-5088 · Published 05/11/2019 · updated 17/06/2026

In breve

CVE-2019-5088 è una vulnerabilità ALTO (CVSS 7.8) che riguarda able2extract (investintech).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 80.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
able2extract investintech	`= 14.0.7`	No fix yet

Description

An exploitable memory corruption vulnerability exists in Investintech Able2Extract Professional 14.0.7 x64. A specially crafted BMP file can cause an out-of-bounds memory write, allowing a potential attacker to execute arbitrary code on the victim machine. Can trigger this vulnerability by sending the user a specially crafted BMP file.

References

talosintelligence.com/vulnerability_reports/TALOS-2019-0880 · Exploit

Altre vulnerabilità di able2extract

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free