Description

Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

Related CPE's

a

fujielectric

monitouch_v-sft

Vulnerable

References

https://jvn.jp/en/vu/JVNVU99188133/index.html

Third Party Advisory

https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-125

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-06-16T02:15:09.310

3 years ago

Last modified

2022-06-27T17:02:30.230

3 years ago