V-SFT Out-of-Bounds Write Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in V-SFT versions through 6.2.5.0, related to an out-of-bounds write in the 'VS6MemInIF!set_temp_type_default' function. This vulnerability can be triggered by opening specially crafted V7 or V8 files, potentially leading to a crash, information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can cause a crash, unauthorized information disclosure, and allow for arbitrary code execution on the affected system.

Remediation

Users are advised to update V-SFT to version 6.2.6.0 or later.