CVE-2023-22345

Опубликовано: 13 фев. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Ссылки

https://jvn.jp/en/vu/JVNVU98917488/
Third Party Advisory
VDB Entry
https://www.electronics.jtekt.co.jp/en/topics/202302035233/
Patch
Vendor Advisory
https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/
Patch
Vendor Advisory
https://jvn.jp/en/vu/JVNVU98917488/
Third Party Advisory
VDB Entry
https://www.electronics.jtekt.co.jp/en/topics/202302035233/
Patch
Vendor Advisory
https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*

Версия до 0.1.1.4 (включая)

cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.0009

Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-q6h2-6w35-jh4w