CVE-2024-28099

2024-04-1510:31:34

jpcert

github.com

vt studio ver.8.32

dll search path

insecure loading

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:keyence:vt_studio:*:*:*:*:*:*:*:*"
    ],
    "vendor": "keyence",
    "product": "vt_studio",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "8.32"
      }
    ],
    "defaultStatus": "unknown"
  }
]