Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Delta Electronics CNCSoft ScreenEditor Buffer Overflow Vulnerability (CNVD-2020-45100)

Delta Electronics CNCSoft ScreenEditor is a set of CNC machine simulation system software from Delta Electronics Taiwan, China. A buffer overflow vulnerability exists in Delta Electronics CNCSoft ScreenEditor version 1.01.23 and earlier. The vulnerability arises when a networked system or product...

CVE-2020-16203

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or...

CVE-2020-16201

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information...

CVE-2020-16201

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information...

CVE-2020-16199

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read/modify information, execute arbitrary code, and/or crash the...

Out-of-bounds

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information...

CVE-2020-16199

Delta Industrial Automation CNCSoft ScreenEditor (Versions 1.01.23 and older) is affected by multiple stack-based buffer overflow vulnerabilities in DPB/project parsing (CVE-2020-16199). Affected component: ScreenEditor; root cause: unchecked lengths copied into fixed-length buffers; impact inclu...

CVE-2020-16201

Delta Industrial Automation CNCSoft ScreenEditor is affected (versions 1.01.23 and earlier) by multiple out-of-bounds read vulnerabilities triggered when parsing DPB project files. The root cause is improper validation during DPB file parsing, leading to information disclosure (read past end of a...

CVE-2020-16201

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. Multiple out-of-bounds read vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to read information...

CVE-2020-16203

Delta Industrial Automation CNCSoft ScreenEditor, Versions 1.01.23 and prior. An uninitialized pointer may be exploited by processing a specially crafted project file. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execute arbitrary code, and/or...

CVE-2020-16203

Delta Industrial Automation CNCSoft ScreenEditor (versions 1.01.23 and earlier) contains an uninitialized pointer vulnerability when processing crafted project/DPB files. Exploitation may allow reading/modifying data, arbitrary code execution, or application crash. Public advisories (ZDI) report ...

Delta Industrial Automation CNCSoft ScreenEditor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Delta Electronics Equipment: Industrial Automation CNCSoft ScreenEditor Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of...

CVE-2020-6976

Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack of validation...

CVE-2020-6976

Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read overflow can be exploited when a valid user opens a specially crafted, malicious input file due to the lack of validation...

CVE-2020-7002

Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid user opens a specially crafted, malicious input file...

Stack overflow

Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid user opens a specially crafted, malicious input file...

CVE-2020-6976

Summary: CVE-2020-6976 impacts Delta CNCSoft ScreenEditor. Affected: CNCSoft ScreenEditor v1.00.96 and earlier. Root cause: out-of-bounds read overflow from improper validation while parsing input in DPB/GIF-related processing. Impact: information disclosure; potential for code execution when com...

CVE-2020-7002

Delta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer overflows can be exploited when a valid user opens a specially crafted, malicious input file...

CVE-2020-7002

Delta Electronics CNCSoft ScreenEditor (CNCSoft ScreenEditor, v1.00.96 and earlier) is affected by CVE-2020-7002. The Red Hat/NVD/ZDI/CISA entries describe multiple stack-based buffer overflows in parsing DPB input (and GIF-name related data in DPB parsing) that can be exploited by a valid user o...