CVE-2019-5088

CVE-2019-5088: Investintech Able2Extract Professional 14.0.7 x64 contains a vulnerability in BMP decoding that can cause an out-of-bounds memory write, enabling arbitrary code execution. The issue arises from heap-allocated memory being sized using biClrUsed without proper bounds checking during ...

CVE-2019-5089

CVE-2019-5089 is a memory-corruption vulnerability in Investintech Able2Extract Professional (version around 14.0.7 x64). A specially crafted JPEG can cause an out-of-bounds write, enabling arbitrary code execution with local access. Talos details show CVSSv3 up to 8.8 (C:H I:H A:H, UI:R), and Re...

CVE-2011-4222

Affected products: Investintech Able2Extract and Able2Extract Server 6.0. Issue: memory corruption vulnerability (CVE-2011-4222) exploitable via crafted PDF, potentially causing denial of service or arbitrary code execution. Evidence: PoC demonstrates constructing a PDF payload (e.g., 12000 'A' b...