CVE-2018-10636 - CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack

Back Back to CVE browser

HIGH

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack

Published Aug 13, 2018

8.8

HIGH

CVSS 3.1

EPSS 9.54%

Description

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.

Affected products

Vendor Ics-Cert Product CNCSoft with ScreenEditor Default
unknown
Affected
- CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Ics-Cert	CNCSoft with ScreenEditor	unknown	Affected CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write

References (3)

http://www.securityfocus.com/bid/105032
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2708
Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/105032		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2708		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Aug 13, 2018

Updated Sep 16, 2024

Reserved May 1, 2018

Link CVE-2018-10636

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-10636

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Aug 13, 2018

Updated Sep 16, 2024

Link EUVD-2018-2708

GitHub

No data