PT-2019-13400 · Delta Electronics · Tpeditor

Kimiya · Publicado 2019-09-11 · Atualizado 2021-10-28 · CVE-2019-13536

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics TPEditor versions 1.94 and prior

Description The issue is related to multiple heap-based buffer overflow vulnerabilities that can be exploited by processing specially crafted project files. This may allow an attacker to remotely execute arbitrary code.

Recommendations For Delta Electronics TPEditor versions 1.94 and prior, update to a version later than 1.94 to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted project files that may trigger the heap-based buffer overflow vulnerabilities. Restrict access to the TPEditor to minimize the risk of exploitation.

Correção

Memory Corruption

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-122

Identificadores relacionados

CVE-2019-13536

ZDI-19-825

ZDI-19-826

ZDI-19-827

ZDI-19-828

Produtos afetados

Tpeditor

Referências · 8

• https://t.me/cvenotify/22566 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-13536 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-19-828 · Nota de Segurança
• https://us-cert.gov/ics/advisories/icsa-19-253-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13536 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-19-827 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-19-825 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-19-826 · Nota de Segurança