PT-2022-18500

Name of the Vulnerable Software and Affected Versions Flexi Soft Designer versions up to and including 1.9.4 SP1 Description A deserialization vulnerability in a .NET framework class used by Flexi Soft Designer allows an attacker to craft malicious project files. When such a malicious project fil...

CVE-2022-27579: Deserialization of Untrusted Data

A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the...