Approved changes feed: RSS · Atom

cpe:2.3:a:hornerautomation:cscape:9.90:sp2:*:*:*:*:*:*

part: a version: 9.90 update: sp2

VendorHornerautomation (e8fb892d-d647-5dbb-8edb-27b63048a341)
ProductCscape (f771f74b-24e1-5c86-83b3-c7dd8e29ca0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7206 vulnerable 2026-06-08 06:21:57.274727 Horner Automation Cscape Stack-Based Buffer Overflow
HIGH (7.8)
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
Published: 2024-01-15T22:22:01.676Z
Updated: 2024-11-13T21:23:40.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3379 vulnerable 2026-06-08 05:48:20.796294 Details available
HIGH (7.8)
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.
Published: 2022-10-27T22:11:48.828Z
Updated: 2025-04-16T17:44:23.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3378 vulnerable 2026-06-08 05:48:20.792725 Details available
HIGH (7.8)
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory write.
Published: 2022-10-27T22:13:41.375Z
Updated: 2025-04-16T17:44:14.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3377 vulnerable 2026-06-08 05:48:20.785768 Details available
HIGH (7.8)
Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory read.
Published: 2022-10-27T22:17:49.252Z
Updated: 2025-04-16T17:44:02.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30540 vulnerable 2026-06-08 05:43:38.273731 Horner Automation Cscape Csfont
HIGH (7.8)
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code
Published: 2022-06-01T13:42:25.030Z
Updated: 2025-04-16T17:52:35.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29488 vulnerable 2026-06-08 05:42:48.055841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28690 vulnerable 2026-06-08 05:42:45.006319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27184 vulnerable 2026-06-08 05:41:54.921863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33015 vulnerable 2026-06-08 05:32:08.510591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32995 vulnerable 2026-06-08 05:32:08.380329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32975 vulnerable 2026-06-08 05:32:08.300135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22682 vulnerable 2026-06-08 05:30:01.070850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22678 vulnerable 2026-06-08 05:30:01.047104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.