CVE-2018-18993
N/A
N/A
Summary
Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior). When processing project files, the application allows input data to exceed the buffer. An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | CX-One (CX-Programmer and CX-Server) | CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior) | affected |
Weaknesses
- CWE-121: STACK-BASED BUFFER OVERFLOW CWE-121
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.