Security Bulletin: Security vulnerability in Dynamic Web TWAIN

Summary:

Due to an issue in the client-side Dynamsoft Service component in Dynamic Web TWAIN, there is a risk that malicious code could be executed remotely. This bulletin identifies the steps to take to address the vulnerability.

Affected Products and Versions:

Dynamsoft Service 1.8.x before 1.8.2014, Dynamsoft Service 1.7.x before 1.7.4212, Dynamsoft Service 1.6.x before 1.6.3212, Dynamsoft Service 1.5.x before 1.5.31212, Dynamsoft Service 1.4.x before 1.4.3212, Dynamsoft Service 1.0.516 through 1.3.0115

Vulnerability Details:

Due to inadequate verification processes in the client-side component of the Dynamsoft Service module of Dynamsoft Dynamic Web TWAIN, there is a risk that malicious code could be remotely executed. This vulnerability poses a potential threat to the security of end-user machines.

Remediation/Fixes:

We strongly recommend all users upgrade for all affected products/versions above by installing the fix here. The update addresses the vulnerability and significantly reduces the risk of exploitation.