V-SFT Out-of-Bounds Read Vulnerability in VS6MemInIF.dll Allowing Crash, Information Disclosure, and Arbitrary Code Execution

A vulnerability exists in V-SFT versions through 6.2.5.0, specifically within the VS6MemInIF.dll file. The issue involves an out-of-bounds read in the 'set_plc_type_default' function. This vulnerability can be exploited by opening specially crafted V7 or V8 files, potentially leading to a program crash, unauthorized information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can cause the application to crash, disclose sensitive information, and execute arbitrary code on the affected system.

Remediation

Users are advised to update V-SFT to version 6.2.6.0 or later.