V-SFT Out-of-Bounds Read Vulnerability in VS6EditData Function Allows Crash, Information Disclosure, and Arbitrary Code Execution

An out-of-bounds read vulnerability has been identified in V-SFT version 6.2.5.0 and earlier, specifically within the VS6EditData!VS4_SaveEnvFile function. This vulnerability arises when the application is tasked with processing V7 or V8 files that have been specially crafted. The exploitation of this issue can lead to a crash, unauthorized information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can cause the application to crash, disclose sensitive information, and execute arbitrary code on the affected system.

Remediation

Users are advised to update to V-SFT version 6.2.6.0 or later, where this vulnerability has been addressed.