RSS   Vulnerabilities for 'Cscape'   RSS

2022-06-02
 
CVE-2022-27184

CWE-787
 
 
The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

 
 
CVE-2022-28690

CWE-787
 
 
The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

 
 
CVE-2022-30540

CWE-122
 
 
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

 
2021-08-25
 
CVE-2021-32975

CWE-125
 
 
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.

 
 
CVE-2021-32995

CWE-20
 
 
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process.

 
 
CVE-2021-33015

CWE-824
 
 
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.

 
2021-04-23
 
CVE-2021-22682

CWE-284
 
 
Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation.

 
 
CVE-2021-22678

CWE-20
 
 
Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.

 
2019-02-28
 
CVE-2019-6555

CWE-20
 
 
Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.

 
2018-12-20
 
CVE-2018-19005

CWE-20
 
 
Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code.

 

Copyright 2024, cxsecurity.com

 

Back to Top