A memory corruption flaw in NI LabVIEW could allow an attacker to achieve arbitrary code execution by enticing a user to open a malicious VI file.

This is an out-of-bounds write vulnerability (CWE-787) triggered within the ResFileFactory::InitResourceMgr function. Successful exploitation requires an unauthenticated attacker to convince a local user to open a specially crafted VI file, which then executes with the privileges of the victim.

The vulnerability carries a CVSS score of 7.8, classifying it as High severity. Successful exploitation allows an attacker to execute arbitrary code on the victim's system, leading to a complete compromise of the local environment. This poses a significant risk of data theft, unauthorized system control, and potential lateral movement within the corporate network.

Immediate Action: Update all installations of NI LabVIEW to the latest patched versions provided by the vendor at the official NI security advisory portal.

Proactive Monitoring: Monitor systems for unusual process execution patterns or unexpected file system modifications originating from the LabVIEW application.

Compensating Controls: Implement strict email filtering and endpoint protection policies to block the execution of untrusted or unsigned VI files, and exercise caution when opening files from unknown sources.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for arbitrary code execution and the severity of memory corruption flaws, organizations must prioritize patching all affected LabVIEW instances. Administrators should verify the version against the enrichment data provided and apply the vendor-recommended updates immediately to eliminate this attack vector.