IRAI AUTOMGEN <= 8.0.0.7 Use-After-Free Remote DoS

AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The dangling-pointer use enables an attacker to influence an indirect call through attacker-controlled memory, resulting in denial-of-service. In some conditions, remote code execution may be possible.

N/A

释放后使用

IRAI Automgen 安全漏洞

IRAI Automgen是法国IRAI公司的一个通用自动化软件工作平台。 IRAI Automgen 8.0.0.7及之前版本存在安全漏洞，该漏洞源于项目文件处理中存在释放后重用问题，可能导致拒绝服务或远程代码执行。

N/A

N/A