Stack-based Buffer Overflow in AutomationDirect C-More EA9 File Parsing

CVE-2024-11609

What is CVE-2024-11609?

The vulnerability within AutomationDirect's C-More EA9 EAP9 file parsing mechanism enables remote attackers to execute arbitrary code. This flaw arises from insufficient validation of user-supplied data length before it is copied into a fixed-length stack-based buffer. To exploit this weakness, an attacker must trick the user into visiting a malicious webpage or opening a compromised file, which could lead to unauthorized code execution in the context of the affected process.

References