Remote Code Execution Vulnerability in Monitouch V-SFT via X1 File Parsing

CVE-2024-11798

What is CVE-2024-11798?

The vulnerability involves a flaw in the parsing process of X1 files in Fuji Electric's Monitouch V-SFT, where insufficient validation of user-supplied data permits a write operation beyond the boundaries of allocated memory. This allows an attacker to execute arbitrary code on the affected systems, necessitating user interaction by requiring the victim to open a malicious file or visit a compromised web page. Successful exploitation leads to the execution of code under the privileges of the current process, potentially compromising the security of the system.

References