CVE-2009-4251 - Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file

Back Back to CVE browser

HIGH

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file

Published Dec 10, 2009

9.3

HIGH

CVSS 2.0

EPSS 8.22%

Description

Stack-based buffer overflow in Jasc Paint Shop Pro 8.10 (aka Corel Paint Shop Pro) allows user-assisted remote attackers to execute arbitrary code via a crafted PNG file. NOTE: this might be the same issue as CVE-2007-2366.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (8)

http://aluigi.freeforums.org/post8780.html
x_refsource_MISC
http://osvdb.org/60592
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/37591
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt
x_refsource_MISC
http://www.securityfocus.com/bid/37204
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/3418
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4220
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54551
vdb-entryx_refsource_XF

Link	Providers	Tags
http://aluigi.freeforums.org/post8780.html		x_refsource_MISC
http://osvdb.org/60592		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/37591		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.packetstormsecurity.org/0912-exploits/jasc-overflow.txt		x_refsource_MISC
http://www.securityfocus.com/bid/37204		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2009/3418		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4220		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54551		vdb-entryx_refsource_XF