o HUMAN TALK released security update to address stack-based buffer overflow vulnerability in DaView Indy, DaVa+, DaOffice softwares.
Arbitrary Code Execution
o A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.
o The vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device.
□ Affected Products
DaView Indy, DaVa+, DaOffice
o Update DaView Indy, DaVa+, DaOffice software over 8.997 version or over then it.
o Thanks to SungHyun Ryu for this vulnerability report.