CVE-2018-8839

State
Published
Severity
Not scored
Published
Apr 30, 2018
Updated
Sep 16, 2024
Reserved
Mar 20, 2018

Read the record on cve.org

Description

Delta PMSoft versions 2.10 and prior have multiple stack-based buffer overflow vulnerabilities where a .ppm file can introduce a value larger than is readable by PMSoft's fixed-length stack buffer. This can cause the buffer to be overwritten, which may allow arbitrary code execution or cause the application to crash. CVSS v3 base score: 7.1; CVSS vector string: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H. Delta Electronics recommends affected users update to at least PMSoft v2.11, which was made available as of March 22, 2018, or the latest available version.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-121 Stack-based buffer overflow CWE-121

Affected Products

ProductVersions
PMSoftDelta Electronics
  • v 2.10 or prior.Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.