CVE-2018-18989
N/A
N/A
Summary
In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | CX-One (CX-Programmer and CX-Server) | CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior) | affected |
Weaknesses
- CWE-416: USE AFTER FREE CWE-416
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.