CVE-2024-41881

2024-07-2908:39:25

jpcert

github.com

sdop

buffer overflow

xml

code execution

AI Score

Confidence

High

EPSS

Percentile

16.2%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

SDoP versions prior to 1.11 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted XML file, arbitrary code may be executed on the user’s environment.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:philiphazel:sdop:*:*:*:*:*:*:*:*"
    ],
    "vendor": "philiphazel",
    "product": "sdop",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.11",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]