CVE-2021-38402

Name of the Vulnerable Software and Affected Versions Delta Electronic DOPSoft 2 versions 2.00.07 and prior

Description The issue arises from a lack of proper validation of user-supplied data when parsing specific project files, leading to a stack-based buffer overflow during font string handling. This could allow an attacker to execute code in the context of the current process.

Recommendations For Delta Electronic DOPSoft 2 versions 2.00.07 and prior, consider disabling the font string handling feature until a patch is available to prevent potential exploitation. Restrict access to project file parsing to minimize the risk of buffer overflow attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.