Heap-Based Buffer Overflow Vulnerability in V-Server and V-Server Lite by Fujie Electric
CVE-2023-47586

7.8HIGH

What is CVE-2023-47586?

Multiple heap-based buffer overflow vulnerabilities have been identified in V-Server versions prior to 4.0.18.0, as well as in V-Server Lite. When users open a specially crafted VPR file, these vulnerabilities could lead to the disclosure of sensitive information and the potential execution of arbitrary code, posing a significant risk to affected systems.

Affected Version(s)

V-Server V4.0.18.0 and earlier

V-Server Lite V4.0.18.0 and earlier

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-47586 : Heap-Based Buffer Overflow Vulnerability in V-Server and V-Server Lite by Fujie Electric