CVE-2017-2804

CVE-2017-2804 is a remote out-of-bounds write in Corel PHOTO‑PAINT X8 (18.1.0.661) TIFF parsing via the IETIF.FLT filter. The TIff IFD/Tag handling can lead to a negative/incorrect size being used in a memcpy, causing memory corruption. Public writeups describe the vulnerability as a memory corru...