Skip to content
OpenAdvisories

Product · Horner Automation

Cscape

19 known vulnerabilities.

18 results · Clear filters · Feed

  • High 8.4

    Out-of-bounds read in Horner Automation Cscape

    Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

  • High 8.4

    Out-of-bounds Read in Horner Automation Cscape

    Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape.

  • High 7.8

    Horner Automation Cscape Out-of-bounds Read

    The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures, resulting in execution of arbitrary code.

  • High 7.8

    Horner Automation Cscape Out-of-bounds Read

    Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code.

  • High 7.8

    Horner Automation Cscape Stack-Based Buffer Overflow

    In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.

  • High 7.8

    The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…

  • High 7.8

    The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could …

  • High 7.8

    The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…

  • High 7.8

    The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then…

  • High 7.8

    Horner Automation Cscape Out-of-bounds Read

    Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the …

  • High 7.8

    Horner Automation Cscape Out-of-bounds Write

    Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e374b. An attacker could leverage this vulnerability to execute arbitrary code in …

  • High 7.8

    The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…

  • High 7.8

    The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This co…

  • High 7.8

    Horner Automation Cscape Out-of-bounds Write

    Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitr…

  • High 7.8

    The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This cou…

  • High 7.8

    Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a…

  • High 7.8

    Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a…

  • High 7.8

    Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a …