Description (CNA)
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom::set_mr400_strc function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FUJI ELECTRIC CO., LTD. / V-SFT | affected v6.2.5.0 and earlier |
CWE
CWE-125
References
- https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php
- https://jvn.jp/en/vu/JVNVU97228144/
ADP enrichment
No English description supplied.
No references supplied.