An out-of-bounds write vulnerability in Labcenter Electronics Proteus allows a remote attacker to execute arbitrary code via a specially crafted PDSPRJ file.

The software fails to properly validate user supplied data during the parsing of PDSPRJ files, leading to an out-of-bounds write condition. An unauthenticated attacker can trigger this flaw by enticing a user to open a malicious file.

Successful exploitation grants an attacker the ability to execute arbitrary code within the context of the current process, potentially leading to full system compromise. With a CVSS score of 7.8, this vulnerability represents a high risk to the confidentiality, integrity, and availability of affected workstations.

Immediate Action: Monitor vendor communications from Labcenter Electronics for the release of an official security patch and apply it immediately upon availability.

Proactive Monitoring: Review system logs for unusual application behavior or crashes occurring when opening project files.

Compensating Controls: Advise users to exercise caution when opening PDSPRJ files from untrusted or unknown sources to prevent accidental triggering of malicious payloads.

Public Exploit Available: No (exploit_available: unknown).

Given the potential for remote code execution, this vulnerability poses a significant threat to internal environments. Organizations should prioritize updating the Proteus software as soon as the vendor provides a fix and reinforce secure file handling practices among users until remediation is complete.