CVE-2011-10015
NONE—CVSS v3
—CVSS v2
4.19%
EPSS (exploit probability)
CWE-121CWE
Description
Cytel Studio version 9.0 and earlier is vulnerable to a stack-based buffer overflow triggered by parsing a malformed .CY3 file. The vulnerability occurs when the application copies user-controlled strings into a fixed-size stack buffer (256 bytes) without proper bounds checking. Exploitation allows arbitrary code execution when the crafted file is opened.
Affected routers (0)
No routers currently mapped to this CVE in our database.