CVE-2024-41139

2024-07-2908:51:00

jpcert

www.cve.org

skysea client view

vulnerability

privilege assignment

dll file

arbitrary code

windows client

EPSS

Percentile

9.4%

JSON

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product’s Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.

CNA Affected

[
  {
    "vendor": "Sky Co.,LTD.",
    "product": "SKYSEA Client View",
    "versions": [
      {
        "version": "Ver.6.010.06 to Ver.19.210.04e",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN84326763/

www.skyseaclientview.net/news/240729_02/

EPSS

Percentile

9.4%

JSON

Related for CVELIST:CVE-2024-41139