ACD Systems Canvas Draw Multiple Out of Bounds Write Remote Code Execution Vulnerabilities

Bugtraq ID:	106809
Class:	Boundary Condition Error
CVE:	CVE-2018-3973 CVE-2018-3981 CVE-2018-3976
Remote:	Yes
Local:	No
Published:	Jan 30 2019 12:00AM
Updated:	Jan 30 2019 12:00AM
Credit:	Tyler Bohan from Cisco Talos.
Vulnerable:	Acdsystems Canvas Draw 5.0 Acdsystems Canvas Draw 5.0.0.28
Not Vulnerable:

ACD Systems Canvas Draw Multiple Out of Bounds Write Remote Code Execution Vulnerabilities

ACD Systems Canvas Draw is prone to multiple remote code-execution vulnerabilities.

Attackers can exploit these issues to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

ACDSystems Canvas Draw version 5.0.0 and 5.0.0.28 are vulnerable.

ACD Systems Canvas Draw Multiple Out of Bounds Write Remote Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ACD Systems Canvas Draw Multiple Out of Bounds Write Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ACD Systems Canvas Draw Multiple Out of Bounds Write Remote Code Execution Vulnerabilities

References:

• Canvas GFX Product Page (Canvas GFX)
  
• Canvas Home Page (Canvas GFX)
  
• ACD Systems Canvas Draw 4 FillSpan Out of Bounds Write Code Execution Vulnerabil (Talos)
  
• ACD Systems Canvas Draw 5 IO metadata out-of-bounds write code execution vulnera (Talos)
  
• ACD Systems Canvas Draw 5 Resolution_Set out-of-bounds write code execution vuln (Talos)