Skip to main content

Hmtalk

8 CVEs vendor

Monthly

CVE-2020-7823 Aug 04, 15:15 HIGH This Week

DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2020-7822 Aug 04, 15:15 HIGH This Week

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2020-7829 Jul 30, 14:15 HIGH This Week

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2020-7828 Jul 30, 14:15 HIGH This Week

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2020-7827 Jul 30, 14:15 HIGH This Week

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.3%
CVE-2020-7818 Jul 17, 22:15 HIGH This Week

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2020-7816 Jun 30, 14:15 HIGH This Week

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Daoffice Dava +2
NVD
CVSS 3.1
7.8
EPSS
1.4%
CVE-2019-9137 Apr 25, 18:29 HIGH This Week

DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Daviewindy Hmtalk
NVD
CVSS 3.1
7.8
EPSS
1.3%
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Daviewindy +1
NVD
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Daviewindy Hmtalk
NVD
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +2
NVD
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +2
NVD
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Daviewindy Hmtalk
NVD
EPSS 1% CVSS 7.8
HIGH This Week

A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Daviewindy +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy