CVE-2018-14800

Summary

Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow execution of code under the context of the application.

Affected Software

Weaknesses

• CWE-121: STACK-BASED BUFFER OVERFLOW CWE-121

ADP Enrichment

CVE Program Container

Additional References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-275-01
• http://www.securityfocus.com/bid/105485

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-275-01
• http://www.securityfocus.com/bid/105485

• ←Previous
• Next→