CVE-2017-2779

Name of the Vulnerable Software and Affected Versions LabVIEW versions 2014 through 2017

Description A memory corruption issue exists in the RSRC segment parsing functionality. This can be triggered by a specially crafted Virtual Instrument (VI) file, causing an attacker-controlled looping condition that results in an arbitrary null write. An attacker-controlled VI file can potentially lead to code execution.

Recommendations For LabVIEW 2014, update to a version that includes the fix for this issue. For LabVIEW 2015, update to a version that includes the fix for this issue. For LabVIEW 2016, update to a version that includes the fix for this issue. For LabVIEW 2017, update to a version that includes the fix for this issue.