Null Pointer Dereference Vulnerability in Inventec VT Designer (CNVD-2021-24483)

VT Designer is a screen editing software developed for VK/VT series touch panels by Shenzhen Inventec Electric Co. A null pointer dereference vulnerability exists in VT Designer. An attacker can exploit this vulnerability to cause the program to crash...

INVT Electric VT-Designer Code Execution Vulnerability

INVT Electric VT-Designer is a graphical development tool from INVT Electric China. A security vulnerability exists in INVT Electric VT-Designer version 2.1.7.31. A remote attacker could exploit the vulnerability to cause the program to crash or execute code...

INVT Electric VT Designer Detection (Windows SMB Login)

SMB login-based detection of INVT Electric VT Designer. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

INVT Electric VT-Designer Heap Buffer Overflow Vulnerability

INVT Electric VT-Designer is a graphical development tool from INVT Electric China. A heap buffer overflow vulnerability exists in INVT Electric VT-Designer version 2.1.7.31. A remote attacker could exploit this vulnerability to cause a program crash or code execution...

CVE-2018-18983

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

Heap overflow

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

Remote code execution

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

CVE-2018-18983

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

CVE-2018-18983

CVE-2018-18983 affects VT-Designer 2.1.7.31. The issue is a heap-based buffer overflow caused when the program reads the contents of a file already in memory into another heap buffer, potentially crashing the process or enabling remote code execution. Documented sources (NVD/CVE record, CNVD, NVD...

CVE-2018-18987

INVT Electric VT-Designer 2.1.7.31 is affected by a deserialization of untrusted data vulnerability that can be triggered by processing input from a file, allowing attacker-controlled data to be written to memory and potentially crash the program or execute arbitrary code. Public write-ups consis...

CVE-2018-18983

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

CVE-2018-18983: Improper Restriction of Operations within the Bounds of a Memory Buffer

VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file which is already in memory into another heap-based buffer, which may cause the program to crash or allow remote code execution...

CVE-2018-18987: Deserialization of Untrusted Data

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution...

INVT Electric VT-Designer

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: INVT Electric Equipment: VT-Designer Vulnerabilities: Deserialization of Untrusted Data, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause...

(0Day) INVT Electric VT-Designer PM3 File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

(0Day) INVT Electric VT-Designer File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing ...

Logic Vulnerability in Inventron VT Designer

INVISION is a key high-tech enterprise under the National Torch Plan. Relying on power electronics, automatic control and information technology, INVISION's business covers industrial automation, new energy vehicles, network energy and rail transportation. A logic vulnerability exists in INVITRO ...