OS Command Execution Vulnerability in Less by GWSW
CVE-2024-32487
8.6HIGH
What is CVE-2024-32487?
A vulnerability in Less prior to version 653 allows attackers to execute operating system commands by manipulating file names with newline characters. This occurs due to improper handling of quotes in the filename.c source code. Exploitation typically involves utilizing attacker-controlled file names, such as those derived from untrusted archives. Furthermore, the exploitation pathway requires the LESSOPEN environment variable to be set, which is often the default configuration in many systems.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.