Stack-based buffer overflow vulnerability in XFPT products
CVE-2024-43700

7.8HIGH

Key Information:

Vendor

Philip Hazel

Status
Xfpt
Vendor
CVE Published:
29 August 2024

What is CVE-2024-43700?

The vulnerability in xfpt affects versions prior to 1.01 and arises from improper handling of specific parameters within user input data. It may lead to a stack-based buffer overflow, allowing an attacker to craft a malicious file that, when processed by an unsuspecting user, results in the execution of arbitrary code within the user's environment. This flaw emphasizes the critical need for robust input validation mechanisms in software development.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

xfpt prior to 1.01

References

https://github.com/PhilipHazel/xfpt
https://github.com/PhilipHazel/xfpt/commit/a690304bbd3fd1...
https://jvn.jp/en/vu/JVNVU96498690/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.