Nick Freeman has reported multiple vulnerabilities in Final Draft, which can be exploited by malicious people to compromise a user's system.

The vulnerabilities are caused due to errors when parsing certain tag elements within script files and can be exploited to cause stack-based buffer overflows via overly long strings in e.g. the "<Word>", "<Transition>", "<Location>", "<Extension>", "<SmartType>", "<SceneIntro>", "<TimeOfDay>", and "<Character>" elements.

Successful exploitation may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 8.02.

Solution
Update to version 8.02.

Provided and/or discovered by
Nick Freeman, Security-Assessment.com.

Changelog
Further details available in Customer Area

Original Advisory
http://www.security-assessment.com/files/documents/advisory/Final_Draft-Multiple_Stack_Buffer_Overflows.pdf

Deep Links
Links available in Customer Area