Description
The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Horner Automation Cscape
Default version status: unaffected
v9.90 SP8affected
Horner Automation Cscape EnvisionRV
Default version status: unaffected
v4.70affected