CVE-2020-28587

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014).

Score
CVSS 3.0 8.8 High
Status
Modified - talos-cna@cisco.com
Published
2021-02-23
Last modified
2024-08-04
Weaknesses
CWE-122, CWE-787

Affected products

References

 
 
© AVABIS GmbH privacypolicy about