Buffer Overflow Vulnerability in Explorer++

CVE-2024-0645

What is CVE-2024-0645?

A buffer overflow vulnerability exists in Explorer++, specifically in version 1.3.5.531. This issue arises when a local attacker sends a lengthy filename argument, which can result in arbitrary code execution. The vulnerability exploits the way Structured Exception Handler (SEH) records are processed, enabling potential manipulation of the program's execution flow. It is crucial for users and administrators of Explorer++ to be aware of this vulnerability and implement necessary security measures to mitigate risks.

References