Vulnerability Description
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Corel | Coreldraw Photo Paint X8 | 18.1.0.661 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/99900Third Party AdvisoryVDB Entry
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0297Third Party Advisory
- http://www.securityfocus.com/bid/99900Third Party AdvisoryVDB Entry
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0297Third Party Advisory
FAQ
What is CVE-2017-2803?
CVE-2017-2803 is a vulnerability with a CVSS score of 8.8 (HIGH). A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in poten...
How severe is CVE-2017-2803?
CVE-2017-2803 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-2803?
Check the references section above for vendor advisories and patch information. Affected products include: Corel Coreldraw Photo Paint X8.