CVE-2024-38309

Description

There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and earlier), and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.

Reserved 2024-06-19 | Published 2024-11-28 | Updated 2024-11-29 | Assigner jpcert

Problem types

Stack-based buffer overflow

Product status

v6.2.2.0 and earlier
affected

v4.0.19.0 and earlier
affected

v4.0.19.0 and earlier
affected

References

monitouch.fujielectric.com/...nload-e/03tellus_inf/index.php

jvn.jp/en/vu/JVNVU97531313/

cve.org (CVE-2024-38309)

nvd.nist.gov (CVE-2024-38309)

Download JSON