CVE-2019-6537 Memory corruption in WECON LeviStudioU
Attackers can execute arbitrary code by tricking users into opening malicious project files in WECON LeviStudioU due to stack-based buffer overflows.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-6537?
CVE-2019-6537 is a high-severity memory corruption vulnerability in ICS-CERT WECON LeviStudioU, published on 13 Feb 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Multiple stack-based buffer overflow vulnerabilities in WECON LeviStudioU version 1.8.56 and prior may be exploited when parsing strings within project files. The process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage these vulnerabilities to execute code under the context of the current process. Mat Powell, Ziad Badawi, and Natnael Samson working with Trend Micro's Zero Day Initiative, reported these vulnerabilities to NCCIC.
Which versions are affected by CVE-2019-6537?
It affects 1 product.
Products include We-Con Levistudiou.
How do I fix CVE-2019-6537?
No fix has been published for CVE-2019-6537 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-6537 being exploited?
There is no known exploitation of CVE-2019-6537 in the wild and no public exploit code.
Other vulnerabilities in ICS-CERT WECON LeviStudioU
Sources
Also known as GHSA-8f2m-6jch-cp65.