Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Computerinsel Photoline 20.54 can run malicious code via PCX image

CVE-2018-3923 · published 8 years ago
Summary

Photoline version 20.54 may write over its own memory when it opens a specially crafted PCX picture. This could let an attacker execute their own code on the system. Apply the vendor’s update or patch as soon as it is available and avoid opening untrusted PCX files in the meantime.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
pl32 photoline 20.54
cpe:2.3:a:pl32:photoline:20.54:*:*:*:*:*:*:*
Original advisory text
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds ...
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published1 Aug 2018
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-3923 · NVD
Track software like this
Free during beta