V-SFT Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in V-SFT versions through 6.2.5.0. The issue arises in the VS6File!CTxSubFile::get_ProgramFile_name function, where opening specially crafted V7 or V8 files can lead to a crash, information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can cause a crash, unauthorized information disclosure, and allow for arbitrary code execution on the affected system.

Remediation

Users are advised to update to V-SFT version 6.2.6.0 or later.