Vulnerability in Microsys Promotic

CVE-2011-4874

Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.

EPSS: 0.015 (72.1th percentile) — read the EPSS interpretation.

Affected products

Microsys Promotic — versions 8.0.0, 8.0.1, 8.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cret@cert.org (x_refsource_CONFIRM)
cret@cert.org (US Government Resource, x_refsource_MISC)
cret@cert.org (vdb-entry, x_refsource_XF)
cret@cert.org (vdb-entry, x_refsource_BID)