Remote Code Execution Vulnerability in Fuji Electric Monitouch V-SFT

CVE-2024-11791

What is CVE-2024-11791?

The vulnerability in the Fuji Electric Monitouch V-SFT product relates to a stack-based buffer overflow occurring in the parsing of V8C files. This issue arises from inadequate validation of user-supplied data before it is copied to a stack-based buffer, enabling remote attackers to execute arbitrary code within the context of the affected process. User interaction is necessary for exploitation, as the targeted user must either access a malicious webpage or open a malicious file designed to trigger the vulnerability. This presents significant security risks, particularly if the user is unaware of the potential dangers associated with such files.

References