CVE-2019-5041 - CVE House
Back to Database
Status published Critical CVE-2019-5041

An exploitable Stack Based Buffer Overflow vulnerability exists in the...

Vulnerability Description

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0. A specially crafted doc file can cause a stack-based buffer overflow, resulting in remote code execution. An attacker needs to provide a malformed file to the victim to trigger this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5041

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Aspose
Vulnerable Versions:
Aspose Aspose.Words 18.11.0.0

Timeline

Official Publish: August 21st, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)