CVE-2018-18987

Name of the Vulnerable Software and Affected Versions VT-Designer version 2.1.7.31

Description The issue arises from the program populating objects with user-supplied input via a file without first checking for validity, allowing attacker-supplied input to be written to known memory locations. This may cause the program to crash or allow remote code execution.

Recommendations For VT-Designer version 2.1.7.31, as a temporary workaround, consider restricting the ability of the program to populate objects with user-supplied input via files until a patch is available. Avoid using files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.