PT-2019-13380 · Dopsoft · Dopsoft

Kimiya · Published 2019-08-15 · Updated 2023-03-03 · CVE-2019-13514

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DOPSoft versions 4.00.06.15 and prior

Description The issue is related to processing specially crafted project files, which may trigger a use-after-free vulnerability. This could potentially lead to information disclosure, remote code execution, or cause the application to crash.

Recommendations For versions 4.00.06.15 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2019-13514

ZDI-19-717

Affected Products

Dopsoft

References · 4

• https://zerodayinitiative.com/advisories/ZDI-19-717 · Security Note
• https://osv.dev/vulnerability/CVE-2019-13514 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13514 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-225-01 · Note