Use After Free in Irai Automgen

CVE-2011-10034

AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently dereferences the stale pointer when processing certain malformed fields. The da…

Vulnerability class: Use-After-Free

EPSS: 0.005 (39.5th percentile) — read the EPSS interpretation.

Affected products

Irai Automgen — versions 0

Weakness classification (CWE)

CWE-416 — Use After Free

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)