Fuji Electric V-SFT Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in Fuji Electric V-SFT versions through 6.2.10.0. The issue arises in the VS6ComFile!CV7BaseMap::WriteV7DataToRom function, where opening a crafted V7 file can lead to arbitrary code execution on the affected product.

Impact

Exploitation of this vulnerability can result in arbitrary code execution on the affected system.

Remediation

Users are advised to update to the latest version of V-SFT. The improvement information for V-SFT version 6.2.11.0 is available on the Fuji Electric website.