A critical out-of-bounds write vulnerability in Labcenter Electronics Proteus allows for remote code execution, posing a severe risk to system integrity.

The software fails to properly validate user-supplied data during the processing of PDSPRJ files, leading to a write past the end of an allocated buffer. This vulnerability requires user interaction, specifically the opening of a malicious file, and can be triggered by an unauthenticated attacker.

The ability for an attacker to execute arbitrary code with the privileges of the current user presents a significant threat to data confidentiality, integrity, and availability. Given the CVSS score of 7.8, this vulnerability is classified as High, indicating that successful exploitation could lead to full system compromise or the installation of persistent malicious software.

Immediate Action: Users should update their Labcenter Electronics Proteus installations to the latest patched version as provided by the vendor.

Proactive Monitoring: Security teams should monitor file system access patterns and look for unexpected child processes spawned by the Proteus application.

Compensating Controls: Ensure that endpoint protection software is configured to scan incoming files for malicious signatures and restrict the execution of untrusted project files from unknown or unverified sources.

Public Exploit Available: No — there is no confirmed public exploit available.

Organizations utilizing Labcenter Electronics Proteus must prioritize the application of vendor-supplied patches to remediate this out-of-bounds write vulnerability. Users should exercise extreme caution when handling PDSPRJ files from untrusted sources until the update is applied, as the risk of arbitrary code execution remains high.