CVE-2017-2804

CVE-2017-2804 is a remote out-of-bounds write in Corel PHOTO‑PAINT X8 (18.1.0.661) TIFF parsing via the IETIF.FLT filter. The TIff IFD/Tag handling can lead to a negative/incorrect size being used in a memcpy, causing memory corruption. Public writeups describe the vulnerability as a memory corru...

CVE-2017-2803

CVE-2017-2803 affects Corel PHOTO-PAINT X8, specifically the TIFF parsing component (IETIF.FLT, 64‑bit DLL) in CorelDRAW Graphics Suite X8. The vulnerability arises in the TIFF IFD parsing path where an underflow in size calculation can lead to a large value passed to memset, causing memory corru...

CVE-2016-8730

Summary: CVE-2016-8730 is a memory corruption/out-of-bounds write vulnerability in Corel PHOTO-PAINT X8 18.1.0.661 caused by the GIF parsing code (IEGIF.flt). A crafted GIF can trigger code execution. Affected product/component: Corel PHOTO-PAINT X8 (18.1.0.661) GIF parsing. Root cause: out-of-bo...