CVE-2024-41881

2024-07-2908:39:25

jpcert

www.cve.org

sdop

buffer overflow

xml input

EPSS

Percentile

16.2%

JSON

SDoP versions prior to 1.11 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted XML file, arbitrary code may be executed on the user’s environment.

CNA Affected

[
  {
    "vendor": "Philip Hazel",
    "product": "SDoP",
    "versions": [
      {
        "version": "prior to 1.11",
        "status": "affected"
      }
    ]
  }
]