description: Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.
problem types: IMPROPER INPUT VALIDATION CWE-20
affected:
{
product: Cscape
vendor: n/a
versions:
status: affected, version: All versions prior to 9.90 SP4
}