Impact
The flaw in Labcenter Electronics Proteus allows an attacker to cause an out‑of‑bounds write while parsing a PDSPRJ file. The overflow can be leveraged to execute arbitrary code in the context of the current process, giving the attacker full control of the application and potentially the host system. This vulnerability is a classic buffer overflow (CWE‑787).
Affected Systems
The vulnerability affects all installations of Labcenter Electronics Proteus that use the PDSPRJ file format. No specific version range is listed, implying that any current or previous release employing the same parser may be susceptible until a vendor update is released.
Risk and Exploitability
The CVSS score of 7.8 classifies this as a high‑severity flaw. While the EPSS score is not available, the lack of a public KEV listing suggests moderate exploitation potential. The vulnerability requires user interaction, such as opening a malicious PDSPRJ file or visiting a site that delivers such a file; an attacker must supply crafted data to trigger the overflow.
OpenCVE Enrichment