CVEvulnerability
CVE-2019-12553
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-06-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the StrCat function (provided by the scripting engine) allows an attacker to overwrite arbitrary memory, which could lead to code execution.
Affected configurations
• sweetscape 010 editor 9.0.1
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://github.com/ereisr00/bagofbugz/blob/master/010Editor/strcat_heap_overflow.bt Exploit, Third Party Advisory
- https://www.sweetscape.com/010editor/release_notes.html Release Notes, Vendor Advisory
- https://github.com/ereisr00/bagofbugz/blob/master/010Editor/strcat_heap_overflow.bt Exploit, Third Party Advisory
- https://www.sweetscape.com/010editor/release_notes.html Release Notes, Vendor Advisory