CVE-2018-12393

A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. Note: 64-bit builds are not vulnerab...

Siemens SIMATIC WinCC CCScriptConv.dll control suffers from a stack overflow vulnerability

Siemens SIMATIC is an automation software with a single engineering environment.WinCC supports the discovery and configuration of LAN device information with the PN-DCP protocol at the Ethernet layer. A stack overflow vulnerability exists in the Siemens SIMATIC WinCC CCScriptConv.dll control. An...