PT-2019-13380 · Dopsoft · Dopsoft
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
DOPSoft versions 4.00.06.15 and prior
Description
The issue is related to processing specially crafted project files, which may trigger a use-after-free vulnerability. This could potentially lead to information disclosure, remote code execution, or cause the application to crash.
Recommendations
For versions 4.00.06.15 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dopsoft