Delta Electronics CNCSoft-G2 File Parsing Stack-based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in Delta Electronics CNCSoft-G2, specifically in versions through 2.1.0.27. The issue arises from improper validation of user-supplied files, allowing attackers to execute code within the context of the current process by opening a malicious file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution in the context of the current process.

Remediation

Users are advised to download and update to version 2.1.0.34 or later. For those in China, the update is available through the Delta China Download Center.