Skip to content
OpenAdvisories
High ICSA-20-238-03 3 CVEs

WECON LeviStudioU (Update C)

Published Aug 25, 2020 · Updated Dec 3, 2020 · Revision 4

Vendor: WECON Product: LeviStudioU

Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application and obtain sensitive information.

Vulnerabilities 3

  • Unscored —
    CVE-2020-16243 EPSS 12%

    Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files.…

  • Unscored —
    CVE-2020-25186

    An XXE vulnerability exists within LeviStudioU Release Build 2019-09-21 and prior when processing parameter entities, w…

  • Unscored —
    CVE-2020-25199

    A heap-based buffer overflow vulnerability exists within the WECON LeviStudioU Release Build 2019-09-21 and prior when …

Revision history

  1. #4

    ICSA-20-238-03 WECON LeviStudioU (Update C)

  2. #3

    ICSA-20-238-03 WECON LeviStudioU (Update B)

  3. #2

    ICSA-20-238-03 WECON LeviStudioU (Update A)

  4. #1

    ICSA-20-238-03 WECON LeviStudioU

References