CVE-2018-18987 - CVE House
Back to Database
Status published High CVE-2018-18987

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects...

Vulnerability Description

VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file without first checking for validity, allowing attacker supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-18987

Credits & Attribution

No credits recorded in the NVD database.

References

More from invt

View All →
CVE-2018-7472
INVT Studio 1.2 allows remote attackers to cause a denial...
Medium 5.5
CVE-2018-18983
VT-Designer Version 2.1.7.31 is vulnerable by the program reading the...
High 8.8

Affected Vendor

Affected Software

vt-designer
Vulnerable Versions:
2.1.7.31

Timeline

Official Publish: November 30th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.