CVE-2018-17913

A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application...

CVE-2018-17909

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application...

Code injection

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application...

CVE-2018-17905

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object...

CVE-2018-17907

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array...

Memory corruption

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object...

Code injection

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array...

CVE-2018-17913

A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application...

CVE-2018-17905

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object...

CVE-2018-17907

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array...

CVE-2018-17909

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application...

CVE-2018-17913

CVE-2018-17913 is a type confusion vulnerability in Omron CX-Supervisor (versions 3.4.1.0 and earlier). The issue arises during processing of project files (notably SCS/PAG file handling) leading to code execution in the vulnerable process. Exploitation is remote in concept but requires user inte...

CVE-2018-17913

A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application...

CVE-2018-17907

CVE-2018-17907 is an Out-of-Bounds Read vulnerability in Omron CX-Supervisor (versions 3.4.1.0 and prior). When processing project files and tampering with the value of an offset, the application can read outside an array. Impact: potential information disclosure; exploitation details emphasize l...

CVE-2018-17909

CVE-2018-17909 corresponds to a Use-After-Free vulnerability in Omron CX-Supervisor’s file parsing routines (SCS file processing), where the application fails to verify the existence of an object before operating on it. This condition can allow code execution in the context of the affected proces...

CVE-2018-17905

CVE-2018-17905 affects Omron CX-Supervisor (v3.4.1.0 and earlier). The issue is memory corruption during SCS file processing (tampering with a specific byte) within a vulnerable object, leading to potential code execution. ZDI-18-1287 confirms remote code execution with user interaction required ...

CVE-2018-17905

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object...

Omron CX-Supervisor Out-of-Bounds Read Vulnerability

Omron CX-Supervisor is a visual machine controller from Omron Japan. An out-of-bounds read vulnerability exists in Omron CX-Supervisor 3.4.1.0 and earlier versions, which can be exploited by an attacker to force an application to read values outside of an array...

OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

OMRON CX-Supervisor SCS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...