Fuji Electric V-SFT Out-of-Bounds Write Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing out-of-bounds write has been identified in the V-SFT application by Fuji Electric, specifically in versions through 6.2.7.0. This vulnerability resides in the 'VS6ComFile' component, within the 'set_AnimationItem' function. Opening specially crafted V-SFT files can result in information disclosure, an abnormal termination of the affected system, and arbitrary code execution.

Impact

Exploitation of this vulnerability can lead to information disclosure, an abnormal system termination, and arbitrary code execution.

Remediation

Users are advised to update the software to the latest version. Improvement information for V-SFT version 6 is available on the Fuji Electric Monitouch website.