Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain a USE AFTER FREE CWE-416. A maliciously crafted Arena file opened by an unsuspecting user may result in the application crashing or the execution of arbitrary code.
[
{
"product": "Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier"
}
]
}
]
www.us-cert.gov/ics/advisories/icsa-19-213-05
www.zerodayinitiative.com/advisories/ZDI-19-1000/
www.zerodayinitiative.com/advisories/ZDI-19-800/
www.zerodayinitiative.com/advisories/ZDI-19-801/
www.zerodayinitiative.com/advisories/ZDI-19-994/
www.zerodayinitiative.com/advisories/ZDI-19-998/
www.zerodayinitiative.com/advisories/ZDI-19-999/
www.zerodayinitiative.com/advisories/ZDI-20-926/
www.zerodayinitiative.com/advisories/ZDI-20-927/
www.zerodayinitiative.com/advisories/ZDI-20-928/
www.zerodayinitiative.com/advisories/ZDI-20-929/
www.zerodayinitiative.com/advisories/ZDI-20-930/
www.zerodayinitiative.com/advisories/ZDI-20-931/