SB2019071510 - Use-after-free in Zelio Soft 2
Published: July 15, 2019
Security Bulletin ID
SB2019071510
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Use-after-free (CVE-ID: CVE-2019-6822)
CWE-ID: CWE-416 - Use After Free
CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a local attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error. A local attacker can send a specially crafted project file and while opening it execute arbitrary code on the affected system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Remediation
Install update from vendor's website.