Stack-Based Buffer Overflow in WECON LeviStudioU by WECON
CVE-2019-6537

7.8HIGH

Key Information:

Vendor

Ics-cert

Vendor
CVE Published:
5 February 2019

What is CVE-2019-6537?

Multiple vulnerabilities involving stack-based buffer overflows have been identified in WECON's LeviStudioU, specifically in versions 1.8.56 and earlier. These vulnerabilities arise when the software improperly validates the length of user-supplied data during the parsing of project files, allowing an attacker to copy excessive data into a fixed-length stack-based buffer. Exploiting these weaknesses could enable unauthorized code execution within the context of the affected application, posing significant security risks to users.

Affected Version(s)

WECON LeviStudioU LeviStudioU Versions 1.8.56 and prior

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.