Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7fxv-pr9h-f54r

Опубликовано: 28 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.

EPSS

Процентиль: 21%
0.00068
Низкий

7.8 High

CVSS3

Дефекты

CWE-824

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.

EPSS

Процентиль: 21%
0.00068
Низкий

7.8 High

CVSS3

Дефекты

CWE-824