PT-2019-12849

CVE-2019-12551

·

Published

2019-07-22

·

Updated

2020-08-24

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions 010 Editor version 9.0.1
Description The issue arises from improper validation of arguments in the internal implementation of the Memcpy function, which is provided by the scripting engine. This allows an attacker to overwrite arbitrary memory, potentially leading to code execution.
Recommendations For version 9.0.1, consider disabling the scripting engine or restricting its use until a patch is available to prevent potential code execution.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾