CVE-2014-3938

Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2014-07-23

Last modified

2024-08-06

Weaknesses

CWE-189

Affected products

• Sketchbook Pro (Autodesk)

References

• http://secunia.com/advisories/58000
• http://secunia.com/secunia_research/2014-6/