Buffer Overflow Vulnerability in Explorer++
CVE-2024-0645

7.3HIGH

Key Information:

Vendor

Explorerplusplus

Status
Explorer++.exe
Vendor
CVE Published:
17 January 2024

What is CVE-2024-0645?

A buffer overflow vulnerability exists in Explorer++, specifically in version 1.3.5.531. This issue arises when a local attacker sends a lengthy filename argument, which can result in arbitrary code execution. The vulnerability exploits the way Structured Exception Handler (SEH) records are processed, enabling potential manipulation of the program's execution flow. It is crucial for users and administrators of Explorer++ to be aware of this vulnerability and implement necessary security measures to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Explorer++.exe 1.3.5.531

References

https://www.incibe.es/en/incibe-cert/notices/aviso/buffer...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafael Pedrero
JSON
.