CVE-2022-3379

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:-:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp1:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp2:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp3:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp4:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp5:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp6:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.90:sp7:*:*:*:*:*:*

History

07 Nov 2023, 03:51

Type Values Removed Values Added
Summary Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer. Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.

Information

Published : 2022-10-27 23:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-3379

Mitre link : CVE-2022-3379

CVE.ORG link : CVE-2022-3379


JSON object : View

Products Affected

hornerautomation

  • cscape
CWE
CWE-787

Out-of-bounds Write