Vulnerability Details CVE-2014-3938
Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.105
EPSS Ranking 92.9%
CVSS Severity
CVSS v2 Score 9.3
References
Products affected by CVE-2014-3938
-
cpe:2.3:a:autodesk:sketchbook_pro:6.2.4
-
cpe:2.3:a:autodesk:sketchbook_pro:6.2.5