Lucene search

[email protected]CVE-2024-0645

HistoryJan 17, 2024 - 2:15 p.m.

CVE-2024-0645

2024-01-1714:15:44

CWE-120

CWE-119

[email protected]

web.nvd.nist.gov

cve-2024-0645

buffer overflow

explorer++

arbitrary code execution

security vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code via a long filename argument by monitoring Structured Exception Handler (SEH) records.

Affected configurations

Vulners

NVD

Node

explorerplusplusexplorer\+\+Range≤1.3.5.531

VendorProductVersionCPE
explorerplusplusexplorer\+\+*cpe:2.3:a:explorerplusplus:explorer\+\+:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
explorerplusplus	explorer\+\+	*	cpe:2.3:a:explorerplusplus:explorer\+\+::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Explorer++.exe",
    "vendor": "explorerplusplus",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.5.531"
      }
    ]
  }
]

References

www.incibe.es/en/incibe-cert/notices/aviso/buffer-overflow-vulnerability-explorer

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2024-0645

prion1 cvelist1 nvd1