Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2018-8871: TPEditor can run malicious code from a bad file
CVE-2018-8871 · published 8 years ago
Summary
TPEditor versions up to 1.89 can be tricked by a specially crafted program file to overflow memory. This could let an attacker run their own code on the affected system. Update TPEditor to a newer version or avoid opening untrusted files.
What to do
- Update deltaww tpeditor to version 1.89 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| deltaww | tpeditor |
< 1.89 cpe:2.3:a:deltaww:tpeditor:*:*:*:*:*:*:*:* |
Original advisory text
In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.
In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution.
References
- http://www.securityfocus.com/bid/104216 Third Party Advisory VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-137-04 Third Party Advisory US Government Resource
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-122Heap-based Buffer Overflow
CWE-787Out-of-bounds Write
Timeline
Published25 May 2018
Updated25 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-8871 · NVD
Track software like this
Free during beta