PT-2019-12125 · Delta Electronics · Cncsoft Screeneditor

Publicado 2019-07-22 · Atualizado 2019-10-09 · CVE-2019-10992

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft ScreenEditor versions 1.00.89 and prior

Description The issue is related to multiple out-of-bounds read vulnerabilities that may cause information disclosure. This is due to lacking user input validation for processing project files.

Recommendations For versions 1.00.89 and prior, update to a version later than 1.00.89 to resolve the issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-10992

ZDI-19-674

ZDI-19-675

Produtos afetados

Cncsoft Screeneditor

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-10992 · Nota de Segurança
• https://us-cert.gov/ics/advisories/icsa-19-192-01 · Correção
• https://zerodayinitiative.com/advisories/ZDI-19-675 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-19-674 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-10992 · Aviso do Fabricante