CVE-2024-25004

2024-02-0907:16:00

CWE-787

web.nvd.nist.gov

kitty

cve-2024-25004

stack-based buffer overflow

security vulnerability

arbitrary code execution

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

CPENameOperatorVersion
9bis:kitty9bis kittyle0.76.1.13

CPE	Name	Operator	Version
9bis:kitty	9bis kitty	le	0.76.1.13

References

packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html

packetstormsecurity.com/files/177032/KiTTY-0.76.1.13-Buffer-Overflows.html

seclists.org/fulldisclosure/2024/Feb/13

seclists.org/fulldisclosure/2024/Feb/14

blog.defcesco.io/CVE-2024-25003-CVE-2024-25004