CVE-2019-12554
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function (provided by the scripting engine) allows an attacker to cause a denial of service by crashing the application.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2019-06-05
- Last modified
- 2024-08-04
- Weaknesses
- CWE-125
Affected products
References
- https://github.com/ereisr00/bagofbugz/blob/master/010Editor/WSubStr.bt
- https://www.sweetscape.com/010editor/release_notes.html