The word processing program TextMaker from the German software manufacturer SoftMaker is vulnerable. Cisco Talos security researchers have found three vulnerabilities. Secure versions are available.

The security researchers have compiled their findings in a report. According to the company’s own information, the security problems affect the TextMaker version 2021 Revision 1014. However, it remains unclear which operating systems are affected. The word processing program is available for Linux, macOS and Windows.

According to a company spokesman, the versions SoftMaker Office 2021 Revision 1024, SoftMaker Office 2018 and FreeOffice 2018 Revision 980 secured.

Remote Code Execution? To address the three vulnerabilities (CVE – 2020 – 13544, CVE – 2020 – 13545, CVE – 2020 – 13546) successfully, attackers have to sign a prepared document on victims, which they open. Then there are memory errors.

If attackers can provoke such a state, applications usually crash (DoS). In such a case, the execution of malicious code is often conceivable. The security researchers do not explicitly mention this. Since the threat level is classified as ” high “, this is obvious.

SoftMaker Office TextMaker Document Record 0x 001 f sign-extension vulnerability SoftMaker Office TextMaker Document Record 0x 003 f integer conversion vulnerability SoftMaker Office TextMaker Document Record 0x 002 a integer overflow vulnerability (of)