Vulnerability Spotlight: Multiple vulnerabilities in Soft Maker Office Text Maker
Summary: Cisco Talos discovered multiple vulnerabilities in SoftMaker Office 2021's TextMaker application, including a sign-extension flaw (CVE-2020-13544), a signed conversion flaw (CVE-2020-13545), and an integer overflow (CVE-2020-13546), all triggered when a user opens an attacker-created document. Talos confirmed the flaws affect TextMaker 2021 revision 1014 and worked with SoftMaker Software GmbH to disclose them and make an update available, with Snort rules 55985-55988 and 55991-55992 detecting exploitation attempts.
What's compelling: Each of these bugs is reached by the ordinary act of opening a document, and the result is heap memory corruption on the victim machine - so the document itself is the attack surface, not a link or a download.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-13544CVE-2020-13545CVE-2020-13546
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026