Remote Code Execution Vulnerability in Luxion KeyShot Viewer Due to KSP File Parsing

CVE-2024-30374

Summary

The vulnerability in Luxion KeyShot Viewer arises from insufficient validation during the parsing of KSP files. This flaw allows attackers to exploit the system by causing an out-of-bounds write, leading to potential remote code execution. Accomplishing this requires user interaction, as the victim must open a harmful KSP file or visit a malicious website. Once exploited, attackers can execute arbitrary code in the context of the affected process, thereby compromising the integrity of the application and potentially the underlying system.

References