{"id":"CVE-2017-9634","state":"PUBLISHED","title":"Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arb","description":"Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash.","publishedAt":"2018-04-17T14:00:00.000Z","updatedAt":"2024-09-17T00:02:36.180Z","severity":null,"assigner":"icscert","products":["Mitsubishi Electric Europe B.V. E-Designer"],"affected":[{"vendor":"Mitsubishi Electric Europe B.V.","product":"E-Designer","versions":[{"version":"Version 7.52 Build 344.","status":"affected"}]}],"references":["https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01","http://www.securityfocus.com/bid/100097"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T19:44:00.786Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/9xxx/CVE-2017-9634.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-9634","state":"PUBLISHED","datePublished":"2018-04-17T14:00:00.000Z","dateUpdated":"2024-09-17T00:02:36.180Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2017-06-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash."}],"affected":[{"vendor":"Mitsubishi Electric Europe B.V.","product":"E-Designer","versions":[{"version":"Version 7.52 Build 344.","status":"affected"}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/100097","name":"100097","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"Out-of-bounds write CWE-787","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2018-04-18T09:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"datePublic":"2017-08-01T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","DATE_PUBLIC":"2017-08-01T00:00:00","ID":"CVE-2017-9634","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"E-Designer","version":{"version_data":[{"version_value":"Version 7.52 Build 344."}]}}]},"vendor_name":"Mitsubishi Electric Europe B.V."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Mitsubishi E-Designer, Version 7.52 Build 344 contains two code sections which may be exploited to allow an attacker to overwrite arbitrary memory locations. This can result in arbitrary code execution, compromised data integrity, denial of service, and system crash."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Out-of-bounds write CWE-787"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01"},{"name":"100097","refsource":"BID","url":"http://www.securityfocus.com/bid/100097"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-213-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/100097","name":"100097","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T17:11:02.366Z"}}]}}}