Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-10982

Опубликовано: 24 июл. 2019
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:deltaww:cnssoft_screeneditor:*:*:*:*:*:*:*:*
Версия до 1.00.89 (включая)

EPSS

Процентиль: 76%
0.00926
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-122
CWE-787

Связанные уязвимости

github
больше 3 лет назад

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.

EPSS

Процентиль: 76%
0.00926
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-122
CWE-787