Stack-Based Buffer Overflow Vulnerability in OnSinView2 by JTEKT
CVE-2023-42507

7.8HIGH

Key Information:

Vendor

Jtekt Electronics Corporation

Status
Onsinview2
Vendor
CVE Published:
17 October 2023

What is CVE-2023-42507?

A stack-based buffer overflow vulnerability has been identified in OnSinView2, specifically in versions 2.0.1 and earlier. When this vulnerability is exploited, it can lead to information disclosure or allow an attacker to execute arbitrary code by manipulating a user into opening a specially crafted OnSinView2 project file. This poses significant security risks for users of the affected software.

Affected Version(s)

OnSinView2 versions 2.0.1 and earlier

References

https://www.electronics.jtekt.co.jp/en/topics/202310175488/
https://jvn.jp/en/vu/JVNVU98392064/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.