Description (CNA)
A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. / V-SFT | affected v6.2.7.0 and earlier |
CWE
CWE-416
References
- https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php
- https://jvn.jp/en/vu/JVNVU90008453/
ADP enrichment
No English description supplied.
No references supplied.