CVE-2017-2880

HIGH

Computerinsel Photoline 20.02 - Memory Corruption via GIF Parsing

Title source: llm

Description

An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.

References (2)

Core 2

Core References

Broken Link vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101188

Exploit, Technical Description, Third Party Advisory x_refsource_misc

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0387

Scores

CVSS v3 7.8

EPSS 0.0145

EPSS Percentile 70.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (2)

pl32/photoline 20.02

Talos/Computerinsel Photoline 20.02

Published Oct 05, 2017

Tracked Since Feb 18, 2026