Description (CNA)
A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / IGSS Definition (Def.exe) version 14.0.0.20247 and prior | affected IGSS Definition (Def.exe) version 14.0.0.20247 and prior |
CWE
CWE-125
References
- https://www.se.com/ww/en/download/document/SEVD-2020-315-03/
- https://www.zerodayinitiative.com/advisories/ZDI-21-096/
ADP enrichment
No English description supplied.