ZeroHour

CVE-2020-13545

PoC
CVSS 3.1
7.8 high
EPSS
2%p74
Published
()
Modified
Description

An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based memory corruption. An attacker can entice the victim to open a document to trigger this vulnerability.

Vendors
softmaker
Products
softmaker office
Weakness
CWE-196, CWE-681, CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news