Hitachi Energy HiDraw Heap-Based Buffer Overflow Vulnerability in XML Parser Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in the XML parsing functionality of Hitachi Energy's HiDraw application. This vulnerability allows an authenticated malicious user with local access to exploit the issue by using a specially crafted XML file. The exploitation of this vulnerability may lead to memory corruption, with the potential for arbitrary code execution. Additionally, successful exploitation could cause application crashes, resulting in a denial-of-service condition, and compromise the confidentiality and integrity of the affected system.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for arbitrary code execution. It may also cause application crashes, creating a denial-of-service condition, and disrupt the confidentiality and integrity of the affected system.