PT-2021-15192
CVE-2021-22754
·
تاريخ النشر
2021-06-11
·
تاريخ التحديث
2021-06-15
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IGSS Definition (Def.exe) versions prior to 15.0.0.21140
Description
A vulnerability exists due to the lack of proper validation of user-supplied data. When a malicious CGF file is imported to IGSS Definition, it could result in loss of data or remote code execution.
Recommendations
For versions prior to 15.0.0.21140, avoid importing CGF files from untrusted sources until a fix is available. As a temporary workaround, consider restricting the import functionality of IGSS Definition to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾