A local buffer overflow vulnerability in R i386 3.5.0 allows attackers to execute arbitrary code on the host system.

This is a local buffer overflow (CWE-787) occurring within the GUI Preferences dialog. By injecting a malicious payload into the Language for menus and messages field, an unauthenticated local user can overwrite structured exception handler (SEH) records to trigger code execution.

Successful exploitation allows for full system compromise, as arbitrary code runs with the privileges of the user who launched the application. Given the CVSS score of 8.4, this vulnerability represents a high risk to organizational security, potentially leading to unauthorized data access, persistence, or lateral movement within the environment.

Immediate Action: Upgrade to a supported, patched version of R that is not version 3.5.0. If an immediate upgrade is not possible, restrict access to the application to trusted users and avoid changing GUI preference settings.

Proactive Monitoring: Monitor system logs for unexpected child processes or unusual application behavior initiated by R.exe.

Compensating Controls: Since this is a local attack vector, enforce host-based security controls such as Endpoint Detection and Response (EDR) solutions to detect buffer overflow attempts or unauthorized shellcode execution.

Public Exploit Available: Yes, a public proof-of-concept exists via the ExploitDB entry 46288.

The severity of this vulnerability, combined with the availability of a functional proof-of-concept, necessitates immediate action. Organizations utilizing R i386 3.5.0 must prioritize upgrading to a secure version to neutralize the risk of arbitrary code execution. Failure to remediate could allow local attackers to escalate privileges or gain persistent control over the affected workstation.