Aggregates CVE and security vulnerability intelligence across all hmtalk-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk memory corruption and vendor risk buffer overflow and related problems; some flaws may lead to vendor impact memory corruption, affecting vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-7872 | DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.39% | 2021-07-12 | 2024-11-21 |
| CVE-2020-7852 | DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.39% | 2021-03-24 | 2024-11-21 |
| CVE-2020-7823 | DaviewIndy has a Memory corruption vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.42% | 2020-08-04 | 2024-11-21 |
| CVE-2020-7822 | DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.39% | 2020-08-04 | 2024-11-21 |
| CVE-2020-7829 | DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.39% | 2020-07-30 | 2024-11-21 |
| CVE-2020-7828 | DaviewIndy 8.98.4 and earlier version contain Heap-based overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.39% | 2020-07-30 | 2024-11-21 |
| CVE-2020-7827 | DaviewIndy 8.98.7 and earlier version contain Use-After-Free vulnerability, triggered when the user opens a malformed specific file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.53% | 2020-07-30 | 2024-11-21 |
| CVE-2020-7818 | DaviewIndy 8.98.9 and earlier has a Heap-based overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.42% | 2020-07-17 | 2024-11-21 |
| CVE-2020-7816 | A vulnerability in the JPEG image parsing module in DaView Indy, DaVa+, DaOffice softwares could allow an unauthenticated, remote attacker to cause an arbitrary code execution on an affected device.nThe vulnerability is due to a stack overflow read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. | [email protected] | 7.0 | 1.34% | 2020-06-30 | 2024-11-21 |
| CVE-2019-9137 | DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed Image file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution. | [email protected] | 7.8 | 0.39% | 2019-04-25 | 2024-11-21 |