CVE-2018-10636CWE-121

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to…

published August 13, 2018

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09417 · 95.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2018-08-13T22:00Z
EPSS history
Timeline
  • 13 AUG 22:00Z
    CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to…
    cvelistv5