An out of bounds read vulnerability in NI LabVIEW allows a local attacker to achieve arbitrary code execution by tricking a user into opening a maliciously crafted VI file.

This is an out of bounds read vulnerability occurring in the LVResFile::FindRsrcListEntry function during the parsing of VI files. The vulnerability can be triggered by an unauthenticated attacker, provided they can convince a user to interact with a specially crafted file.

Successful exploitation of this vulnerability poses a severe risk to organizational systems, as it can lead to information disclosure or the execution of arbitrary code with the privileges of the user who opens the malicious file. Given the CVSS score of 7.8, this is classified as a High severity issue. If exploited, an attacker could potentially gain unauthorized control over the workstation or extract sensitive proprietary engineering data, leading to significant operational disruption or intellectual property theft.

Immediate Action: Review the official NI security advisory and apply all recommended software updates or patches as soon as they are made available by the vendor.

Proactive Monitoring: Monitor system logs for unusual file access patterns or unexpected application crashes associated with LabVIEW, which may indicate an attempt to exploit memory corruption vulnerabilities.

Compensating Controls: Advise users to exercise extreme caution when opening VI files from untrusted or unknown sources to prevent the inadvertent execution of malicious payloads.

Public Exploit Available: No (exploit_available: false)

The risk associated with this vulnerability is significant due to the potential for arbitrary code execution. Organizations utilizing NI LabVIEW should prioritize monitoring the vendor support page for updates and ensure that all instances of the software are patched as soon as the vendor provides remediation. Until a patch is applied, strict adherence to secure file handling practices is essential to minimize the risk of exploitation.