A memory corruption vulnerability in Labcenter Proteus could allow an attacker to execute arbitrary code through the processing of specially crafted files.

The application contains a use-after-free (CWE-416) flaw triggered during the parsing of malicious files. This vulnerability requires the user to interact with a crafted file and does not require the attacker to be authenticated to the system.

A successful exploit could result in memory corruption, leading to application crashes or the execution of arbitrary code, which could compromise the integrity of engineering designs and intellectual property. With a CVSS score of 7.8, this vulnerability represents a high-severity risk to environments utilizing Proteus for circuit design and simulation.

Immediate Action: Update the Proteus installation to the latest version (9.2 SP0) via the application's home page or the Help menu.

Proactive Monitoring: Review system logs for unexpected application termination or memory access violations associated with the Proteus executable.

Compensating Controls: Restrict the opening of files from untrusted sources and utilize sandboxing technologies to isolate the Proteus environment.

Public Exploit Available: false

Given the availability of a vendor-supplied update to version 9.2 SP0, administrators should immediately initiate the upgrade process for all affected Proteus instances. Ensuring software is up-to-date is the only effective mitigation for this memory-related vulnerability.