V-SFT Out-of-Bounds Write Vulnerability in VS6ComFile Function Allowing Arbitrary Code Execution

An out-of-bounds write vulnerability has been identified in V-SFT versions through 6.2.5.0, specifically within the VS6ComFile function 'MakeItemGlidZahyou'. This vulnerability allows for an out-of-bounds write, which could be exploited by opening specially crafted V7 or V8 files. The exploitation of this vulnerability may result in a crash, unauthorized information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can lead to a system crash, unauthorized information disclosure, and arbitrary code execution.

Remediation

Users are advised to update V-SFT to version 6.2.6.0 or later.