← CVE Intelligence

CVE-2022-29886

ESTsoft / Alyac PUBLISHED

Description (CNA)

An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
ESTsoft / Alyacaffected 2.5.8.544

CWE

CWE-680

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.