RULE(RULE ID:333270)

Rule General Information
Release Date: 2021-03-26
Rule Name: WECON LeviStudio ShortMessage Module SMtext Stack Buffer Overflow Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: A stack buffer overflow exists in WECON LeviStudio. The vulnerability is due to improper parsing of XML SMtext attribute by WECON LeviStudio's ShortMessage_Module. A remote attacker could exploit this vulnerability by enticing a user to open a crafted project. Successful exploitation could allow the attacker to execute arbitrary code under the security context of the user process.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.