CVE-2019-5019

🗓️ 07 Mar 2019 20:29:00Reported by [email protected]Type

A heap-based overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro R1 (7,0,2018,1113). While parsing Document Summary Property Set stream, the getSummaryInformation function is incorrectly checking the correlation between size and the number of properties in PropertySet packets, causing an out-of-bounds write that leads to heap corruption and consequent code execution

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2019-5019	7 Mar 201920:00	–	cve
Cvelist	CVE-2019-5019	7 Mar 201920:00	–	cvelist
EUVD	EUVD-2019-14626	7 Oct 202500:30	–	euvd
OSV	CVE-2019-5019	7 Mar 201920:29	–	osv
Prion	Heap overflow	7 Mar 201920:29	–	prion
Talos	Antenna House Rainbow PDF Office server document converter getSummaryInformation NumProperties code execution vulnerability	28 Feb 201900:00	–	talos
Talos Blog	Vulnerability Spotlight: Remote code execution vulnerability in Antenna House Rainbow PDF Office Server Document Converter	28 Feb 201907:22	–	talosblog