Not rated
CVE-2021-32995 Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Description
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cscape | Versions not published |
References
- us-cert.cisa.gov us-cert.cisa.gov
Timeline
- Published
- Last modified
Other CVEs of Cscape
The 7 CVEs of Cscape →
CVE-2021-33015
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-32975
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-22678
Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-22682
Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full…
Not rated