Omron CX-Supervisor (Update A)
When processing project files and tampering with a specific byte, memory corruption may occur within a specific object.CVE-2018-17905 has been assigned to this vulnerability. A CVSS v3 base score of 4.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L). When processing project files and tampering with the value of an offset, an attacker can force the application to read a value outside of an array.CVE-2018-17907 has been assigned to this vulnerability. A CVSS v3 base score of 2.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). When processing project files the application fails to check if it is referencing freed memory, which may allow an attacker to execute code in under the context of the application.CVE-2018-17909 has been assigned to this vulnerability. A CVSS v3 base score of 4.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L). A type confusion vulnerability exists when processing project files, which may allow an attacker to execute code in the context of the application.CVE-2018-17913 has been assigned to this vulnerability. A CVSS v3 base score of 7.0 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).