Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code under the privileges of the application.
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://www.us-cert.gov/ics/advisories/icsa-19-227-02 | mitigation third party advisory us government resource |
| https://www.zerodayinitiative.com/advisories/ZDI-19-798/ | third party advisory vdb entry |
| https://www.zerodayinitiative.com/advisories/ZDI-19-820/ | third party advisory vdb entry |