CVE-2019-5041

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0. A specially crafted doc file can cause a stack-based buffer overflow, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger this vulnerability.

Score

CVSS 3.0 9.8 Critical

Status

Modified - talos-cna@cisco.com

Published

2019-08-21

Last modified

2024-08-04

Weaknesses

CWE-121, CWE-787

Affected products

• Aspose.words (Aspose)

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0805