Remote Code Execution Vulnerability in Fuji Electric Monitouch V-SFT Due to Stack-based Buffer Overflow

CVE-2024-11787

What is CVE-2024-11787?

The vulnerability affects Fuji Electric's Monitouch V-SFT V10 software, allowing remote attackers to execute arbitrary code through a stack-based buffer overflow. This flaw arises from inadequate validation of the length of user-supplied data while parsing V10 files, permitting attackers to manipulate the stack and run malicious code by enticing users to visit a compromised webpage or open a crafted file. Exploitation of this vulnerability requires user interaction, making it imperative for organizations to apply recommended security practices and updates.

References