Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3379

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.

Published

2022-10-27T23:15:11.000

Last Modified

2024-11-21T07:19:24.430

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-787
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hornerautomation cscape < 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
Application hornerautomation cscape 9.90 Yes
References