CVE-2018-3973

ACD Systems Canvas Draw 5.x is affected by CVE-2018-3973 in the CAL parsing path (and related CALS/TIFF handling). A specially crafted image can trigger an out-of-bounds write, overwriting data and enabling code execution. Public advisories (Talos) detail multiple out-of-bounds write vectors in 5...