CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
References
Link Resource
https://jvn.jp/en/vu/JVNVU92877622/index.html Third Party Advisory VDB Entry
https://jvn.jp/vu/JVNVU92877622/index.html Third Party Advisory VDB Entry
https://jvn.jp/en/vu/JVNVU92877622/index.html Third Party Advisory VDB Entry
https://jvn.jp/vu/JVNVU92877622/index.html Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:26

Type Values Removed Values Added
References () https://jvn.jp/en/vu/JVNVU92877622/index.html - Third Party Advisory, VDB Entry () https://jvn.jp/en/vu/JVNVU92877622/index.html - Third Party Advisory, VDB Entry
References () https://jvn.jp/vu/JVNVU92877622/index.html - Third Party Advisory, VDB Entry () https://jvn.jp/vu/JVNVU92877622/index.html - Third Party Advisory, VDB Entry

Information

Published : 2022-12-07 04:15

Updated : 2024-11-21 07:26


NVD link : CVE-2022-43508

Mitre link : CVE-2022-43508

CVE.ORG link : CVE-2022-43508


JSON object : View

Products Affected

omron

  • cx-programmer
CWE
CWE-416

Use After Free