PT-2019-13400 · Delta Electronics · Tpeditor

Kimiya · Published 2019-09-11 · Updated 2021-10-28 · CVE-2019-13536

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta Electronics TPEditor versions 1.94 and prior

Description The issue is related to multiple heap-based buffer overflow vulnerabilities that can be exploited by processing specially crafted project files. This may allow an attacker to remotely execute arbitrary code.

Recommendations For Delta Electronics TPEditor versions 1.94 and prior, update to a version later than 1.94 to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted project files that may trigger the heap-based buffer overflow vulnerabilities. Restrict access to the TPEditor to minimize the risk of exploitation.

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2019-13536

ZDI-19-825

ZDI-19-826

ZDI-19-827

ZDI-19-828

Affected Products

Tpeditor

References · 8

• https://osv.dev/vulnerability/CVE-2019-13536 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-19-828 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-13536 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-827 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-825 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-826 · Security Note
• https://t.me/cvenotify/22566 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-19-253-01 · Note