CVE-2024-43700

2024-08-2907:36:13

jpcert

www.cve.org

xfpt versions

buffer overflow

arbitrary code execution

EPSS

0.001

Percentile

20.4%

JSON

xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted file, arbitrary code may be executed on the user’s environment.

CNA Affected

[
  {
    "vendor": "Philip Hazel",
    "product": "xfpt",
    "versions": [
      {
        "version": "prior to 1.01",
        "status": "affected"
      }
    ]
  }
]