Softmaker Planmaker 2021 vulnerabilities

CVE-2020-13580 [HIGH] CWE-787 CVE-2020-13580: An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing fun An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to write a 16-bit null relative to a buffer allocated on the st

CVE-2020-13579 [HIGH] CWE-190 CVE-2020-13579: An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser perform arithmetic that may overflow which can result in an undersized heap allocation. Later when copying data from the file into this allocat

CVE-2020-13586 [HIGH] CWE-122 CVE-2020-13586: A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of So A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014). A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

CVE-2020-27248 [HIGH] CWE-122 CVE-2020-27248: A specially crafted document can cause the document parser to copy data from a particular record typ A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0003 and 0x0014, an attacker can entice the victim to open a document to trigger this vul

CVE-2020-27249 [HIGH] CWE-122 CVE-2020-27249: A specially crafted document can cause the document parser to copy data from a particular record typ A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0004 and 0x0015, an attacker can entice the victim to open a document to trigger this vul

CVE-2020-27247 [HIGH] CWE-122 CVE-2020-27247: A specially crafted document can cause the document parser to copy data from a particular record typ A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0002, an attacker can entice the victim to open a document to trigger this vulnerability.

CVE-2020-13581 [HIGH] CWE-122 CVE-2020-13581: In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted docu In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is smaller than the size used for the copy which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger th

CVE-2020-28587 [HIGH] CWE-122 CVE-2020-28587: A specially crafted document can cause the document parser to copy data from a particular record typ A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Soft

CVE-2020-27250 [HIGH] CWE-122 CVE-2020-27250: In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted docu In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014), a specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow at Version/Instance 0x0005 and 0x001