CVE-2022-30540

The CVE-2022-30540 entry relates to Horner Automation Cscape Csfont. The vulnerability is a heap-based buffer overflow via an uninitialized pointer, which could allow an attacker to execute arbitrary code. Affected product: Cscape Csfont (versions up to 9.90 SP5). Impact is high (C:H/I:H/A:H) per...

CVE-2022-3377

Summary: CVE-2022-3377 affects Horner Automation’s Cscape, specifically versions 9.90 SP 6 and prior. The issue is an improper validation of user-supplied data when opening a maliciously formed FNT file, leading to an out-of-bounds memory read due to an uninitialized pointer and potentially arbit...

CVE-2022-27184

CVE-2022-27184 affects Horner Automation Cscape Csfont. The vulnerability is an out-of-bounds write (via an uninitialized pointer) that may allow an attacker to execute arbitrary code. Affected product/version: Horner Automation Cscape Csfont up to version 9.90 SP5 (v9.90.196) and prior. Mitigati...

CVE-2022-29488

The CVE-2022-29488 issue affects Horner Automation Cscape Csfont. According to CVE records and the ICS advisory, it is an out-of-bounds read via an uninitialized pointer in Csfont that could enable arbitrary code execution. Affected product/version details from publicly documented sources indicat...

CVE-2022-28690

The CVE-2022-28690 issue affects Horner Automation Cscape Csfont and is described as an out-of-bounds write via an uninitialized pointer that may allow arbitrary code execution. Public sources in the Connected documents associate this vulnerability with Csfont (versions prior to 9.90 SP6) and lis...

CVE-2021-22663

CVE-2021-22663 affects Horner Automation Cscape (all versions prior to 9.90 SP3.5). The vulnerability stems from improper validation of user-supplied data when parsing project files, causing an out-of-bounds read and enabling code execution in the context of the affected process. Affected version...

CVE-2022-3379

Summary: CVE-2022-3379 affects Horner Automation’s Cscape up to version 9.90 SP7 (and prior). The vulnerability arises from improper validation of user-supplied data in FNT file handling, enabling a local attacker to execute arbitrary code by writing outside the memory buffer when a malicious FNT...

CVE-2019-6555

CVE-2019-6555 affects Horner Automation’s Cscape (versions 9.80 SP4 and earlier). The vulnerability is an improper input validation in CSP file processing, enabling reading of confidential information and remote code execution via specially crafted POC files. MITRE/attack details in connected sou...

CVE-2023-7206

The CVE-2023-7206 issue affects Horner Automation Cscape, specifically versions 9.90 SP10 and earlier. It is a stack-based buffer overflow vulnerability in Cscape when a user opens a malicious CSP file, allowing local attackers to execute arbitrary code on affected installations. The root cause, ...

CVE-2022-3378

CVE-2022-3378 affects Horner Automation's Cscape (versions 9.90 SP 7 and prior). The vulnerability arises from improper validation of user-supplied data in FNT files, allowing an attacker to run code in the current process by accessing an uninitialized pointer, which can cause an out-of-bounds me...

CVE-2018-19005

CVE-2018-19005 concerns Horner Automation Cscape CSP file parsing vulnerabilities. The connected advisories (ZDI-18-1434/1435/1436/1437/1438/1439/1441/1442 and related entries) describe multiple remote code execution flaws stemming from parsing CSP files, caused by lack of proper validation of us...

CVE-2021-22678

CVE-2021-22678 affects Horner Automation Cscape: all versions before 9.90 SP4 are vulnerable due to improper validation of user-supplied data when parsing project files, causing memory corruption and allowing code execution in the current process. Public sources (NVD/Red Hat/NVD mirrors and CISA ...

CVE-2021-22682

CVE-2021-22682 affects Horner Automation Cscape prior to version 9.90 SP4. The root issue is improper access control: the product is configured by default to be installed for all users, granting full permissions (read/write) to unprivileged users, which can lead to local privilege escalation by m...

CVE-2021-32995

CVE-2021-32995 affects Horner Automation Cscape (all versions prior to 9.90 SP5). The vulnerability arises from improper validation of user-supplied data when parsing project files, leading to an out-of-bounds write and potential code execution in the current process. The CVSS data indicates a lo...

CVE-2021-33015

CVE-2021-33015 affects Cscape: all versions prior to 9.90 SP5 lack proper validation of user-supplied data when parsing project files, causing an out-of-bounds write via an uninitialized pointer and enabling code execution in the current process. Affected product: Horner Automation Cscape (indust...

CVE-2021-32975

CVE-2021-32975 affects Horner Automation Cscape: all versions prior to 9.90 SP5. The vulnerability arises from lack of proper validation of user-supplied data when parsing project files, which can cause an out-of-bounds read and enable code execution in the context of the current process. Exploit...