Threat database

An out-of-bounds read vulnerability exists in FUJI ELECTRIC CO. , LTD. / Hakko Electronics Co. , Ltd. V-SFT versions 6.2.10.0 and prior. The flaw occurs in the VS6ComFile component's get_macro_mem_COM function. Opening a specially crafted V7 file may cause information disclosure from the affected product.

A stack-based buffer overflow vulnerability exists in FUJI ELECTRIC CO. , LTD. / Hakko Electronics Co. , Ltd. V-SFT versions 6.2.10.0 and prior. The flaw is located in the VS6ComFile! CSaveData::_conv_AnimationItem function.

An out-of-bounds read vulnerability exists in FUJI ELECTRIC CO. , LTD. / Hakko Electronics Co. , Ltd. V-SFT versions 6.2.10.0 and earlier. The flaw occurs in the function VS6MemInIF! set_temp_type_default and can be triggered by opening a specially crafted V7 file.

V-SFT versions 6.2.10.0 and earlier contain an out-of-bounds read vulnerability in the VS6ComFile! load_link_inf function. This vulnerability can be triggered by opening a specially crafted V7 file, potentially leading to information disclosure. The vulnerability has a high severity rating with a CVSS score of 7.8. There is no information provided about an available patch or vendor advisory. The product is not a cloud service, and no known exploits are reported in the wild.

V-SFT versions 6.2.10.0 and earlier contain a stack-based buffer overflow vulnerability in the VS6ComFile! CV7BaseMap::WriteV7DataToRom function. This flaw can be triggered by opening a specially crafted V7 file, potentially allowing an attacker to execute arbitrary code on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. No official patch or vendor advisory information is provided at this time, and there are no known exploits in the wild.

A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::is_motion_tween of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds write vulnerability exists in VS6ComFile!set_AnimationItem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.