| Package | Affected versions | Patched versions |
|---|---|---|
| cscape | = 9.90< 9.90 | 9.90 |
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free