Parvez Anwar has discovered a vulnerability in RemoteExec, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error when processing RemoteExec Computers List files. This can be exploited to cause a stack-based buffer overflow via a ".rec" file having an overly long line.

Successful exploitation allows execution of arbitrary code, but requires that a user is tricked into loading a malicious computers list file.

The vulnerability is confirmed in version 4.04. Prior versions may also be affected.

Solution
Update to version 4.05.

Provided and/or discovered by
Parvez Anwar, reported through Secunia

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.isdecisions.com/en/software/remoteexec/history.cfm
http://blog.isdecisions.com/post/452928936/security-update-for-remoteexec

Deep Links
Links available to Secunia VIM customers