Vulnerabilities

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected install…

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT).

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

The affected product does not properly validate user-supplied data.

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP).

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data.

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data.

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data.

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.

Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files.

Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access.

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files.

In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation.