CVE-2020-13580

Katalog CVE

CVSS 7.8 · High EPSS 70,7%

Kerentanan Out-of-bounds Write pada softmaker planmaker 2021. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to write a 16-bit null relative to a buffer allocated on the stack. Due to a lack of bounds-checking on this value, this can allow an attacker to write to memory outside of the buffer and controllably corrupt memory. This can allow an attacker to earn code execution under the context of the application. An attacker can entice the victim to open a document to trigger this vulnerability.

Rincian

Terbit di NVD

4 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

70,7% peluang dieksploitasi; lebih tinggi dari 99,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1191 exploit · deskripsi teknis · advisory pihak ketiga