Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDSPRJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25717.

N/A

使用不兼容类型访问资源(类型混淆)

Labcenter Electronics Proteus 安全漏洞

Labcenter Electronics Proteus是英国Labcenter公司的一款用于电路设计与嵌入式系统仿真的电子工程软件。 Labcenter Electronics Proteus存在安全漏洞，该漏洞源于解析PDSPRJ文件时缺乏对用户提供数据的适当验证，可能导致类型混淆，从而在当前进程环境中执行任意代码。

N/A

N/A