title: Horner Automation Cscape Stack-Based Buffer Overflow
description:
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
problem types: CWE-121 Stack-Based Buffer Overflow
affected:
{
defaultStatus: unaffected
product: Cscape
vendor: Horner Automation
versions:
lessThanOrEqual: 9.90 SP10, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
Horner Automation recommends users to apply  v9.90 SP11 https://hornerautomation.com/cscape-software/  or the latest version of their software.