V-SFT Out-of-Bounds Read Vulnerability Allowing Crash, Information Disclosure, and Arbitrary Code Execution

An out-of-bounds read vulnerability has been identified in V-SFT versions through 6.2.5.0, specifically within the VS6EditData!Conv_Macro_Data function. This vulnerability can be triggered by opening specially crafted V7 or V8 files, potentially leading to a crash, unauthorized information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can cause the application to crash, disclose sensitive information, and execute arbitrary code on the affected system.

Remediation

Users are advised to update V-SFT to version 6.2.6.0 or later.