본문내용 바로가기 메인메뉴 바로가기 하단내용 바로가기

Security Advisory

Security Advisory Detail
CVE-2020-7816 | DaView Indy, DaVa+. DaOffice stack-based Buffer Overflow Vulnerability2020.06.30
□ Overview
o HUMAN TALK released security update to address stack-based buffer overflow vulnerability in DaView Indy, DaVa+, DaOffice softwares.
Vulnerability type Impact Severity CVSS Score CVE ID
Buffer Overflow Arbitrary Code Execution High 7.0 CVE-2020-7816
 
□ Description
o A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.
o The vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.
 
□ Affected Products
Product Version Platform
DaView Indy, DaVa+, DaOffice under v8.995 Windows OS
 
□ Solution
 o Update DaView Indy, DaVa+, DaOffice software over 8.997 version or over then it.
 
□ Acknowledgement
 o Thanks to SungHyun Ryu for this vulnerability report.


□ 작성 : 침해사고분석단 취약점분석팀
키워드 DaView