{"id":"CVE-2018-10636","published":"2018-08-13T22:00:00Z","modified":"2024-09-16T18:13:08Z","title":"CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow…","vendor":"ICS-CERT","product":"CNCSoft with ScreenEditor","tier":"core","eol":null,"affectedVersions":[{"vendor":"ICS-CERT","product":"CNCSoft with ScreenEditor","versions":["CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54"]}],"description":{"text":"CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking user input validation before copying data from project files onto the stack. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.","provenance":"source","from":"CVE.org"},"summary":{"text":"CNCSoft with ScreenEditor, in versions 1.00.83 and prior and 1.00.54 respectively, contains multiple stack-based buffer overflow flaws caused by missing input validation before data from project files is copied onto the stack. An attacker who can supply a crafted project file may crash the software or, if exploited, gain remote code execution with administrator privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:17:11Z"},"cvss":null,"epss":{"score":0.09417,"percentile":0.95397,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-121","name":"Stack-based Buffer Overflow"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-219-01","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/105032","tags":["vdb-entry","x_refsource_BID"]}],"techniques":[{"id":"T1499.004","name":"Application or System Exploitation","tactics":["impact"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"primary_impact","evidence":[],"confidence":"high"},{"id":"T1574","name":"Hijack Execution Flow","tactics":["execution","stealth"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"primary_impact","evidence":[],"confidence":"high"},{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-2708","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2708","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"primary","techniques":["T1574","T1499.004"],"provenance":"source"},{"stage":"secondary","techniques":["T1068"],"provenance":"source"}],"timeline":[{"date":"2018-08-13","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-10636","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":19.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.08,"detail":"percentile 0.9540"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}