PT-2021-15194
CVE-2021-22756
·
Published
2021-06-11
·
Updated
2021-06-15
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IGSS Definition (Def.exe) versions prior to 15.0.0.21140
Description
A CWE-125: Out-of-bounds read issue exists due to lack of user-supplied data validation, which could result in disclosure of information or remote code execution when a malicious CGF file is imported.
Recommendations
For versions prior to 15.0.0.21140, update to a version that contains a fix for this issue to prevent potential exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾