CVE-2019-10982

🗓️ 24 Jul 2019 14:51:27Reported by icscertType

Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap

Reporter	Title	Published	Views	Family All 10
CNVD	Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2019-32233)	15 Jul 201900:00	–	cnvd
CVE	CVE-2019-10982	24 Jul 201914:51	–	cve
EUVD	EUVD-2019-2696	7 Oct 202500:30	–	euvd
ICS	Delta Industrial Automation CNCSoft ScreenEditor	11 Jul 201900:00	–	ics
NVD	CVE-2019-10982	24 Jul 201915:15	–	nvd
OSV	CVE-2019-10982	24 Jul 201915:15	–	osv
Prion	Heap overflow	24 Jul 201915:15	–	prion
RedhatCVE	CVE-2019-10982	22 May 202510:24	–	redhatcve
Zero Day Initiative	Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	22 Jul 201900:00	–	zdi
Zero Day Initiative	Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	22 Jul 201900:00	–	zdi

[
  {
    "product": "CNCSoft ScreenEditor",
    "vendor": "Delta Electronics",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 1.00.89 and prior"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-19-192-01

24 Jul 2019 14:51Current

8High risk

Vulners AI Score8

EPSS0.00926

CWE-122