Security^Ghost has discovered a vulnerability in Hex Workshop, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the processing of Intel Hex files. This can be exploited to cause a stack-based buffer overflow via a specially crafted Intel Hex (".hex") file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in versions 4.23 and 6.0.1.4603. Other versions may also be affected.

Solution
Do not import untrusted ".hex" files in Hex Workshop.

Provided and/or discovered by
Security^Ghost

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/8121

Deep Links
Links available in Customer Area