CVE-2019-5030CWE-122

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1…

High · published October 31, 2019

CVSS v3.0
8.8
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 (7,0,2019,0220). While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds corresponding to the number of style levels, causing a vtable pointer to be overwritten, which leads to code execution.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02866 · 86.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2019-10-31T20:09Z
EPSS history
Timeline
  • 31 OCT 20:09Z
    A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1…
    cvelistv5