Ariele Caltabiano

A malicious attacker can trigger a remote buffer overflow in the Communication Server.

The issue arises from the program populating objects with user-supplied input via a file without first checking for validity, allowing attacker-supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution.

The issue arises when the program reads the contents of a file into another heap-based buffer, potentially causing the program to crash or allowing remote code execution. This is related to a heap-based buffer overflow during file parsing.

The issue allows an attacker to force the application to read a value outside of an array by tampering with the value of an offset when processing project files. This can lead to information disclosure.

The issue is related to multiple stack-based buffer overflow vulnerabilities that can be exploited by processing specially crafted project files. These vulnerabilities may allow an attacker to remotely execute arbitrary code due to a lack of user input validation before copying data from project files onto the stack.

The issue is related to multiple out-of-bounds write vulnerabilities that can be exploited by processing specially crafted project files. These files lack user input validation, which may cause the system to write outside the intended buffer area and may allow remote code execution.

The issue allows an attacker to cause the application to read past the boundary allocated to a stack object by opening a crafted file. This could potentially allow execution of code under the context of the application.

The issue is related to a buffer overflow that can occur when parsing a maliciously crafted project file. This may allow an attacker to execute arbitrary code, cause a denial of service, or disclose protected information. The estimated number of potentially affected devices worldwide is not specified.

The issue allows remote execution of arbitrary code through buffer overflow caused by specially crafted files.

A Stack-based Buffer Overflow issue was discovered, which may allow remote code execution.

This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the `app.launchURL` method due to the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this to execute code under the context of the current process.

A Heap-Based Buffer Overflow issue was discovered, where a maliciously crafted project file may trigger a heap-based buffer overflow. This could crash the process and allow an attacker to execute arbitrary code.

A memory corruption issue has been identified, which may allow remote code execution due to improper restriction of operations within the bounds of a memory buffer.

The issue is related to multiple instances of heap-based buffer overflows. These overflows may allow malicious files to cause the execution of arbitrary code or a denial of service. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

An issue was discovered in the software, where multiple instances of out-of-bounds write conditions may allow malicious files to be read and executed by the affected software. This could potentially lead to remote code execution.

An issue allows an attacker to trigger a stack-based buffer overflow by sending additional valid packets, potentially causing a crash. Additionally, a malicious attacker can trigger a remote buffer overflow on the Fatek Communication Server.

The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memory buffer. This can be achieved by sending additional valid packets.

The issue is caused by a heap-based buffer overflow in the object memory when reading a network packet that is larger than the available space. This can allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

The issue allows remote attackers to execute arbitrary code via a crafted RSS project file, due to a buffer overflow in the project file parsing mechanism. This can lead to remote code execution.

The issue is related to a heap-based buffer overflow in the elcsoft.exe component, allowing remote authenticated users to execute arbitrary code by providing a crafted file.