Buffer Overflow Vulnerability in TCBServiSign
CVE-2024-40722

4.3MEDIUM

Key Information:

Vendor

Changingtec

Status
Tcb Servisign
Vendor
CVE Published:
2 August 2024

What is CVE-2024-40722?

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disrupting its service.

References

https://www.twcert.org.tw/tw/cp-132-7967-9efdf-1.html
https://www.twcert.org.tw/en/cp-139-7973-e10c6-2.html

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-40722 : Buffer Overflow Vulnerability in TCBServiSign