Khangkito – Tran Van Khang

**Name of the Vulnerable Software and Affected Versions** Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0 **Description** Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution. **Recommendations** For versions prior to 4.0.10.0, update to version 4.0.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of project files from untrusted sources until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0 **Description** Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution. **Recommendations** For versions prior to 4.0.10.0, update to version 4.0.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of project files from untrusted sources until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0 **Description** Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution. **Recommendations** For versions prior to 4.0.10.0, update to version 4.0.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of project files from untrusted sources until a patch is applied.