A stack-based buffer overflow in Labcenter Proteus could allow a local attacker to execute arbitrary code, necessitating an immediate software update.

The application contains a stack-based buffer overflow (CWE-121) that can be triggered by an attacker to execute arbitrary code. This vulnerability requires the attacker to have local access and typically involves user interaction to process a malicious file.

With a CVSS score of 7.8, this vulnerability presents a significant risk of arbitrary code execution on workstations running the software. While the attack vector is local, successful exploitation allows an attacker to gain the privileges of the user running Proteus, potentially leading to unauthorized data access or the installation of persistent threats on the host system.

Immediate Action: Update the Proteus installation to the latest version (9.2 SPO) as recommended by Labcenter to remediate the buffer overflow flaw.

Proactive Monitoring: Monitor user workstations for unauthorized file execution or unexpected behavior associated with the Proteus application.

Compensating Controls: Implement file integrity monitoring and restrict the execution of untrusted or externally sourced project files within the Proteus environment.

Public Exploit Available: false

Users of Labcenter Proteus should move quickly to update their software to version 9.2 SPO. Ensuring that the latest build is deployed is the most effective way to eliminate this stack-based overflow risk and secure the workstation environment.