high7.8
CVE-2018-3857
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0.
Impact
An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3858.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acdsystems | Canvas Draw | Version 4.0.0 |