Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: Hmtalk Component: Daviewindy Clear all filters
TI-2020-06377 CVE-2020-7872 · GHSA-5c2x-hfph-j2qc

Integer overflow in HumanTalk DaviewIndy

Priority LOW 36

DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00862 Published 2021-07-12 Fixed in 8.98.8.0 CWE-190
TI-2020-06360 CVE-2020-7852 · GHSA-9f4w-5h89-5mhq

DaviewIndy Heap Overflow Vulnerabilities

Priority LOW 36

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00959 Published 2021-03-24 Fixed in 9.0 or lower CWE-122
TI-2020-06337 CVE-2020-7823 · GHSA-wpxh-7mhx-fc98

DaviewIndy Multiple Vulnerabilities

Priority LOW 36

DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01177 Published 2020-08-04 No fix listed CWE-20
TI-2020-06336 CVE-2020-7822 · GHSA-jhcg-52pw-m42j

DaviewIndy Multiple Vulnerabilities

Priority LOW 36

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01168 Published 2020-08-04 No fix listed CWE-20
TI-2020-06342 CVE-2020-7828 · GHSA-946x-5j76-f99g

DaviewIndy Heap-based Buffer Overflow Vulnerability

Priority LOW 37

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01248 Published 2020-07-30 No fix listed CWE-122
TI-2020-06343 CVE-2020-7829 · GHSA-38mw-39hm-59rm

DaviewIndy Heap-based Buffer Overflow Vulnerability

Priority LOW 37

DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01248 Published 2020-07-30 No fix listed CWE-122
TI-2020-06341 CVE-2020-7827 · GHSA-2h2r-w6vh-2w6r

DaviewIndy Use-After-Free Vulnerability

Priority LOW 37

DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01312 Published 2020-07-30 No fix listed CWE-416
TI-2020-06332 CVE-2020-7818 · GHSA-ff89-95cf-8ph8

DaviewIndy Heap Overflow Vulnerability

Priority LOW 37

DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0124 Published 2020-07-17 No fix listed CWE-20
TI-2019-06601 CVE-2019-9137 · GHSA-c8pj-xcf4-vhc8

Integer overflow in HumanTalk Co,Ltd DaviewIndy

Priority LOW 37

DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0131 Published 2019-04-25 No fix listed CWE-190