Horner Automation Cscape 9.90 Service Pack 4
Approved changes feed: RSS · Atom
cpe:2.3:a:hornerautomation:cscape:9.90:sp4:*:*:*:*:*:*
part: a version: 9.90 update: sp4
| Vendor | Hornerautomation (e8fb892d-d647-5dbb-8edb-27b63048a341) |
|---|---|
| Product | Cscape (f771f74b-24e1-5c86-83b3-c7dd8e29ca0d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7206 |
vulnerable | 2026-06-08 06:21:57.276233 |
Horner Automation Cscape Stack-Based Buffer Overflow
HIGH (7.8)
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
Published: 2024-01-15T22:22:01.676Z
Updated: 2024-11-13T21:23:40.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3379 |
vulnerable | 2026-06-08 05:48:20.796331 |
Details available
HIGH (7.8)
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.
Published: 2022-10-27T22:11:48.828Z
Updated: 2025-04-16T17:44:23.288Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3378 |
vulnerable | 2026-06-08 05:48:20.792834 |
Details available
HIGH (7.8)
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.
Published: 2022-10-27T22:13:41.375Z
Updated: 2025-04-16T17:44:14.140Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3377 |
vulnerable | 2026-06-08 05:48:20.787146 |
Details available
HIGH (7.8)
Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory read.
Published: 2022-10-27T22:17:49.252Z
Updated: 2025-04-16T17:44:02.711Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30540 |
vulnerable | 2026-06-08 05:43:38.274753 |
Horner Automation Cscape Csfont
HIGH (7.8)
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code
Published: 2022-06-01T13:42:25.030Z
Updated: 2025-04-16T17:52:35.320Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29488 |
vulnerable | 2026-06-08 05:42:48.055877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28690 |
vulnerable | 2026-06-08 05:42:45.007574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27184 |
vulnerable | 2026-06-08 05:41:54.922986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33015 |
vulnerable | 2026-06-08 05:32:08.510628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32995 |
vulnerable | 2026-06-08 05:32:08.380363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32975 |
vulnerable | 2026-06-08 05:32:08.301094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.