CVE-2021-38404 in DOPSoftinformation

Résumé

par MITRE • 18/09/2021

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

10/08/2021

Divulgation

18/09/2021

Modérer

accepté

Entrée

VDB-182510

CPE

prêt

CWE

CWE-122 (confirmé)

CVSS

6.3 (VulDB)

EPSS

0.01036

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2021-38404
NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-38404
CVE Details	https://www.cvedetails.com/cve/CVE-2021-38404/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!