## Submit a CVE Request

### Guide

- https://github.com/CVEProject/cveproject.github.io/blob/gh-pages/requester/reservation-guidelines.md

### Url

- https://cveform.mitre.org/

### Select a request type

- Report Vulnerability/Request CVE ID

### Enter your e-mail address

- @

### Enter a PGP Key (to encrypt) 

- 

### Number of vulnerabilities reported or IDs requested (1-10)

- 1

### Check

- I have verified that this vulnerability is not in a CNA-covered product.
- I have verified that the vulnerability has not already been assigned a CVE ID. 

### Vulnerability type

- CWE-125: Out-of-bounds Read

### Vendor of the product(s)

- Orbis Software Ltd.

### Affected product(s)/code base

- Easy Grade Pro
- 4.1.0.2 and earlier (no fixed version, vendor appears inactive and product is end-of-life)

### Attack type

- Local

### Impact

- Denial of Service

### Affected component(s)

- EGP file parser, gradebook file loading logic, memory copy routines handling gradebook fields

### Attack vector(s)

- To exploit the vulnerability, a user must open a specially crafted .EGP gradebook file using Easy Grade Pro.

### Suggested description of the vulnerability for use in the CVE

- Easy Grade Pro contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled access violation and application crash, leading to a local denial-of-service condition when the crafted file is opened by a user.

### Discoverer(s)/Credits

- Alejandro Vazquez Vazquez

### Reference(s)

- 

### Additional information

- Reference will be made public after CVE ID assignment. A full technical write-up, proof of concept, and crash demonstration will be published once the CVE identifier is known. The affected product appears to be end-of-life and the original vendor does not seem to be actively maintaining or supporting the software. This disclosure is provided for transparency and documentation purposes.

### Message

Thank you for your request. You will be receiving a confirmation email shortly. If you need to reach the CVE team, please respond to the confirmation email you received and do not change the subject line. Your ticket number will be included in the email and that is how we will track your request. Thank you.

Information provided on the web form will remain private until the CVE Team receives notice that the vulnerability has been made public. Please use the “Notify CVE about a publication” form to notify us about a publication.

Please note: One confirmation message is sent for multiple CVE ID requests in a single browser session, with a single ticket number for your ease of reference. If you plan to request additional CVE IDs, and would like a different ticket number for your next request, please close your browser and open a new session.
