Not rated
CVE-2021-22678 Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files
Description
Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cscape | Versions not published |
References
- us-cert.cisa.gov us-cert.cisa.gov
Timeline
- Published
- Last modified
Other CVEs of Cscape
The 7 CVEs of Cscape →
CVE-2021-33015
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-32975
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-32995
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-22682
Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full…
Not rated