← Toutes les actualités
Labcenter Proteus 9
Synthèse
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process. View CVE Details Affected Products Labcenter Proteus 9 Vendor:Labcenter Electronics Product Version:Labcenter Electronics Proteus: 9.1_SP4_Build_42914 Product Status:known_affected Remediations Vendor fixLabcenter recommends ensuring you are using the latest
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process. View CVE Details Affected Products Labcenter Proteus 9 Vendor:Labcenter Electronics Product Version:Labcenter Electronics Proteus: 9. 1_SP4_Build_42914 Product Status:known_affected Remediations Vendor fixLabcenter recommends ensuring you are using the latest version (9. 2 SPO) of the software.
Version can be found by looking at the bottom left of the Proteus home page (Version 8 or higher) or by selecting the About ISIS or About ARES option from the Help menu. Update notifications appear in the new and information section of the home page where you can activate the download and installation directly. MitigationIf you have questions or need help please contact Labcenter or your local distributor. Relevant CWE: CWE-416 Use After Free Metrics CVSS Version Base Score Base Severity Vector String 3. 1 7.
8 HIGH CVSS:3. 1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 4. 0 8. 4 HIGH CVSS:4.