CVE-2018-10598 - CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files

Back Back to CVE browser

HIGH

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files

Published Aug 13, 2018

8.1

HIGH

CVSS 3.0

EPSS 3.52%

Description

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.

Affected products

Vendor Ics-Cert Product CNCSoft with ScreenEditor Default
n/a
- Version
  CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ics-Cert

CNCSoft with ScreenEditor

n/a

Version	Status	Constraints
CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

http://www.securityfocus.com/bid/105032
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/105032		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Aug 13, 2018

Updated Sep 17, 2024

Reserved May 1, 2018

Link CVE-2018-10598

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-10598

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-10598