CVE-2024-25091

2024-03-0108:59:12

jpcert

github.com

revoworks

scvx

browser

protection mechanism failure

malware

sandbox

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using ‘VirusChecker’ or ‘ThreatChecker’ feature) and RevoWorks Browser prior to 2.2.95 (when using ‘VirusChecker’ or ‘ThreatChecker’ feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:jscom:revoworks_scvx:*:*:*:*:*:*:*:*"
    ],
    "vendor": "jscom",
    "product": "revoworks_scvx",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.10.21_1013",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:jscom:revoworks_browser:*:*:*:*:*:*:*:*"
    ],
    "vendor": "jscom",
    "product": "revoworks_browser",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.2.95",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]