CVE-2023-22277: Use After Free
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-22277?
CVE-2023-22277 is a use after free vulnerability that exists in CX-Programmer Ver.9.79 and earlier.
How can the CVE-2023-22277 vulnerability be exploited?
The CVE-2023-22277 vulnerability can be exploited by having a user open a specially crafted CXP file, which can lead to information disclosure and/or arbitrary code execution.
What is the severity of CVE-2023-22277?
The severity of CVE-2023-22277 is high, with a CVSS score of 7.8.
What software versions are affected by the CVE-2023-22277 vulnerability?
CX-Programmer Ver.9.79 and earlier versions are affected by the CVE-2023-22277 vulnerability.
How can I fix the CVE-2023-22277 vulnerability?
To fix the CVE-2023-22277 vulnerability, users should update CX-Programmer to a version higher than 9.79.