PT-2019-12853
CVE-2019-12555
·
Published
2019-06-05
·
Updated
2020-08-24
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SweetScape 010 Editor version 9.0.1
Description
The issue arises from improper validation of arguments in the internal implementation of the
SubStr function, which is provided by the scripting engine. This allows an attacker to cause a denial of service by crashing the application.Recommendations
For version 9.0.1, consider disabling the
SubStr function as a temporary workaround until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾