CVE-2017-2920

🗓️ 05 Oct 2017 19:00:00Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 53 Views

An memory corruption vulnerability in Computerinsel Photoline 20.02's .SVG parsing can lead to arbitrary code execution

Reporter	Title	Published	Views	Family All 26
CNVD	Computerinsel Photoline Out-of-Bounds Write Remote Code Execution Vulnerability	9 Oct 201700:00	–	cnvd
Cvelist	CVE-2017-2920	5 Oct 201719:00	–	cvelist
EUVD	EUVD-2017-12061	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 26 Update: libofx-0.9.10-5.fc26	11 Apr 201819:08	–	fedora
Fedora	[SECURITY] Fedora 28 Update: libofx-0.9.10-6.fc28	7 Apr 201822:16	–	fedora
Fedora	[SECURITY] Fedora 27 Update: libofx-0.9.10-5.fc27	11 Apr 201816:32	–	fedora
Tenable Nessus	GLSA-201908-26 : libofx: Multiple vulnerabilities	3 Sep 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : libofx (openSUSE-2018-820)	8 Aug 201800:00	–	nessus
Tenable Nessus	SUSE SLED12 Security Update : libofx (SUSE-SU-2018:2064-1)	27 Jul 201800:00	–	nessus
Gentoo Linux	libofx: Multiple vulnerabilities	31 Aug 201900:00	–	gentoo

NVD

Vulners

Node

pl32 photolineMatch20.02

[
  {
    "product": "Computerinsel Photoline",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "20.02"
      }
    ]
  }
]

Source	Link
github	www.github.com/libofx/libofx/commit/a70934eea95c76a7737b83773bffe8738935082d
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0427
securityfocus	www.securityfocus.com/bid/101186
security	www.security.gentoo.org/glsa/201908-26