Remote Information Disclosure Vulnerability in National Instruments Help Library

CVE-2013-5024

What is CVE-2013-5024?

The ActiveX control in the National Instruments NI .NET Class Library Help, specifically within the NationalInstruments.Help2.dll file, presents a vulnerability that enables remote attackers to potentially gain unauthorized access to sensitive information. This can be achieved through specifically crafted method calls involving the key-open or key-close functions, leading to the exposure of critical registry key information. This vulnerability affects various versions of Measurement Studio and poses risks in environments utilizing these applications.

References