CVE:CVE-2020-7816
CNNVD:CNNVD-202006-1861
DaView Indy是一款文档和图像查看器。
DaView Indy、DaVa+和DaOffice中的JPEG图像解析模块中存在安全漏洞。远程攻击者可借助特制的PDF文件利用该漏洞在受影响的设备上执行任意代码。
solution:Upgrade hmtalk daoffice to a higher version than 8.995,and avoid the version (,8.995); Upgrade hmtalk dava+ to a higher version than 8.995,and avoid the version (,8.995); Upgrade hmtalk daview_indy to a higher version than 8.995,and avoid the version (,8.995)