CVE-2017-2803: corel coreldraw_photo_paint_x8 Out-of-bounds Write
Vulnerability summary
CVE-2017-2803 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in corel coreldraw_photo_paint_x8. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 66% of scored vulnerabilities.
Timeline
- 24-04-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
1.13%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
-0.49 pp
From 1.62% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Corel2 products
- coreldraw_photo_paint_x818.1.0.661
- photo-paintX8 (Corel TIFF Import/Export Filter (64-Bit) - 18.1.0.661) - x64 version
1 vendor · 2 products