Remote Code Execution Vulnerability in Fuji Electric Monitouch V-SFT Due to Heap-based Buffer Overflow

CVE-2024-11933

What is CVE-2024-11933?

A significant vulnerability exists in the file parsing component of Fuji Electric Monitouch V-SFT X1, allowing remote attackers to execute arbitrary code. The flaw arises due to insufficient validation of the length of user-supplied data before it is copied into a heap-based buffer. Successful exploitation of this vulnerability requires user interaction, where the target must open a malicious file or visit a compromised webpage, leading to potential execution of harmful scripts or programs in the context of the application.

References