Lucene search
PRIOn knowledge basePRION:CVE-2022-3378HistoryOct 27, 2022 - 11:15 p.m.
Design/Logic Flaw
2022-10-2723:15:00
PRIOn knowledge base
www.prio-n.com
5
horner automation
cscape
version 9.90
design flaw
arbitrary code execution
uninitialized pointer
memory write
EPSS
0.001
Percentile
26.2%
Horner Automation’s Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.
Related
nvd
nvd
CVE-2022-3378
2022-10-27 23:15:10
cvelist
cvelist
CVE-2022-3378
2022-10-27 22:13:41
cve
cve
CVE-2022-3378
2022-10-27 23:15:10
ics
ics
Horner Automation Cscape
2022-10-04 12:00:00