CVE-2020-27280

Name of the Vulnerable Software and Affected Versions: ISPSoft versions 3.12 and prior

Description: A use after free issue has been identified in the way ISPSoft processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution.

Recommendations: For ISPSoft versions 3.12 and prior, as a temporary workaround, consider restricting the processing of project files from untrusted sources until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.