CVE-2019-18994 ABB PB610 HMIStudio crashes after launching an empty *.JPR application file

Due to a lack of file length check, the HMIStudio component of ABB PB610 Panel Builder 600 versions 2.8.0.424 and earlier crashes when trying to load an empty .JPR application file. An attacker with access to the file system might be able to cause application malfunction such as denial of service...

CVE-2019-18994

CVE-2019-18994 affects ABB PB610 Panel Builder 600 HMIStudio component. The vulnerability arises from a lack of file length checks, causing crashes when loading an empty *.JPR application file in versions 2.8.0.424 and earlier. Impact described: application malfunction/denial of service if an att...