Fuji Electric V-SFT and TELLUS Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in VS6Sim.exe, part of the V-SFT and TELLUS software suites from Fuji Electric. This vulnerability affects V-SFT versions through 6.2.5.0 and TELLUS versions through 4.0.20.0. The issue arises when V9 or X1 files, crafted by an attacker, are opened in the affected software, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the affected system.

Remediation

Users are advised to update to the latest version of the software. For V-SFT, the corrected version is 6.2.7.0. For TELLUS, the corrected version is 4.0.23.0.