CVE-2023-22347

Опубликовано: 13 фев. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Ссылки

https://jvn.jp/en/vu/JVNVU98917488/
Patch
Third Party Advisory
VDB Entry
https://www.electronics.jtekt.co.jp/en/topics/202302035233/
Patch
Vendor Advisory
https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/
Patch
Vendor Advisory
https://jvn.jp/en/vu/JVNVU98917488/
Patch
Third Party Advisory
VDB Entry
https://www.electronics.jtekt.co.jp/en/topics/202302035233/
Patch
Vendor Advisory
https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*

Версия до 0.1.1.4 (включая)

cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00066

Низкий

7.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

GHSA-9p88-mf79-r844