Stack-based buffer overflow in MOVITOOLS MotionStudio - #VU105386

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parsing of ICP files by the mticomp0 component. A remote unauthenticated attacker can trick a victim to open a specially crafted file, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Remediation

External References

• https://www.zerodayinitiative.com/advisories/ZDI-25-110/
• https://download.sew-eurodrive.com/download/pdf/31987192.pdf#search=%22security_advisory%22a

Related Security Bulletins

• Stack-based buffer overflow in SEW-EURODRIVE MOVITOOLS MotionStudio