PatchTheCVEaspose vulnerabilities
Recent CVEs affecting aspose products. 6 tracked.
aspose has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-09-18. Highest priority: CVE-2019-5067 (score 67/100).
- CVE-2019-5067 CRITICAL 9.8 DOWNGRADE An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent
- CVE-2019-5066 CRITICAL 9.8 DOWNGRADE An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.P
- CVE-2019-5042 HIGH 8.8 DOWNGRADE An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Asp
- CVE-2019-5041 HIGH 8.8 DOWNGRADE An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.
- CVE-2019-5033 HIGH 8.8 DOWNGRADE An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1
- CVE-2019-5032 HIGH 8.8 DOWNGRADE An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19
FAQ
How do I fix aspose vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aspose being exploited right now?
None of the tracked aspose CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aspose CVE should I patch first?
CVE-2019-5067 currently ranks highest (67/100): An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent .