Delta Electronics CNCSoft-G2 File Parsing Stack-based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in Delta Electronics CNCSoft-G2, specifically in version 2.1.0.27 and prior. This vulnerability arises from improper validation of user-supplied files. When a user opens a malicious file, an attacker can exploit this flaw to execute code within the context of the current process.

Impact

Exploitation of this vulnerability allows for arbitrary code execution in the context of the affected process.

Remediation

Users are advised to download and update to version 2.1.0.34 or later. For those in China, the update is available through the Delta Download Center.