CVE-2019-25622

Summary

Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key entry mechanism. Attackers can create a text file with a large buffer of characters and trigger the application to read it, causing the application to crash and become unavailable.

Affected Software

Weaknesses

• CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.exploit-db.com/exploits/46126
• http://www.pixarra.com/
• http://www.pixarra.com/uploads/9/4/6/3/94635436/tbpaintstudio_install.exe
• https://www.vulncheck.com/advisories/paint-studio-denial-of-service-via-malformed-input

• ←Previous
• Next→