Fuji Electric V-Server VPR File Parsing Type Confusion Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing CArchive Read Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing CArchive Read Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

PT-2018-12746

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server version 4.0.3.0 and prior Description A heap-based buffer overflow vulnerability has been identified, which may allow remote code execution. The issue is related to the VPR file parsing, specifically a CArchive read...

PT-2018-12744

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description Multiple untrusted pointer dereference issues have been identified, which may allow remote code execution. The vulnerabilities are related to the VPR file parsing and CArchive read...

PT-2018-12750

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description A stack-based buffer overflow issue has been identified, which may allow remote code execution. Recommendations For Fuji Electric V-Server versions 4.0.3.0 and prior, at the moment,...

PT-2018-12749

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description An out-of-bounds read issue has been identified, which may allow remote code execution. Recommendations For Fuji Electric V-Server versions 4.0.3.0 and prior, at the moment, there i...

PT-2018-12742

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description A use after free vulnerability has been identified in Fuji Electric V-Server, which may allow remote code execution. The issue is related to VPR file parsing and a CObArray...

PT-2018-12747

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior Description Several out-of-bounds write vulnerabilities have been identified, which may allow remote code execution. The issue is related to the VPR file parsing, where a type confusion...

PT-2018-1572

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server Lite versions 4.0.3.0 and prior Description The issue is related to a buffer overflow that can occur when parsing a maliciously crafted project file. This may allow an attacker to execute arbitrary code, cause a denial o...

Fuji Electric V-Server

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Fuji Electric Equipment: V-Server Vulnerabilities: Use-After Free, Untrusted Pointer Dereference, Heap-based Buffer Overflow, Out-of-Bounds Write, Integer Underflow,...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 11, 2018

As a native Texan, I’ve seen more than my fair share of bugs - actual physical bugs that love the hot, humid Texas climate and my curly hair for some reason. The Zero Day Initiative ZDI sees many bugs of the software variety, including those that affect SCADA control systems. Fritz Sands recently...

Fuji Electric V-Server VPR File Parsing Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric V-Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Fuji Electric V-Server VPR Stack Buffer Overflow Vulnerability

Fuji Electric V-Server is a data collection software from Fuji Electric Japan, and VPR is a layout routing tool for array-based FPGAs. A stack buffer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.1.0 and earlier versions, which can be exploited by an attacker to remotely execute...

CVE-2018-5442

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-5442

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

Stack overflow

A Stack-based Buffer Overflow issue was discovered in Fuji Electric V-Server VPR 4.0.1.0 and prior. The stack-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-5442

Fuji Electric V-Server VPR is affected by CVE-2018-5442, a Stack-based Buffer Overflow in VPR 4.0.1.0 and earlier. The vulnerability arises from improper validation of user-supplied data during project file parsing, copying data into a fixed-length buffer, which can lead to remote code execution....