| Package | Affected versions | Patched versions |
|---|---|---|
| cscape | = 9.90 | |
| cscape envisionrv | = 4.70 |
The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free