CVE-2016-8730 - CVE House
Back to Database
Status published High CVE-2016-8730

An of bound write / memory corruption vulnerability exists in...

Vulnerability Description

An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in potential memory corruption resulting in code execution. An attacker can send the victim a specific GIF file to trigger this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-8730

Credits & Attribution

No credits recorded in the NVD database.

References

More from Corel

View All →
CVE-2022-43618
This vulnerability allows remote attackers to execute arbitrary code on...
High 7.8
CVE-2022-43617
This vulnerability allows remote attackers to execute arbitrary code on...
High 7.8
CVE-2022-43616
This vulnerability allows remote attackers to execute arbitrary code on...
High 7.8
CVE-2022-43615
This vulnerability allows remote attackers to disclose sensitive information on...
Low 3.3
CVE-2022-43614
This vulnerability allows remote attackers to execute arbitrary code on...
High 7.8

Affected Vendor

Affected Software

Corel PHOTO-PAINT
Vulnerable Versions:
X8 (Corel Import/Export Filter (64-Bit) - 18.1.0.661) - x64 version

Timeline

Official Publish: April 24th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.