Remote Code Execution Vulnerability in Luxion KeyShot Viewer Due to KSP File Parsing Stack-Based Buffer Overflow
CVE-2024-5507
What is CVE-2024-5507?
A stack-based buffer overflow vulnerability exists in Luxion KeyShot Viewer due to inadequate validation of the length of user-supplied data during the parsing of KSP files. This flaw allows remote attackers to potentially execute arbitrary code on affected systems. Exploitation of this vulnerability requires user interaction, as the user must either visit a malicious web page or open a malicious KSP file. The security risk is considerable, as successful exploitation can lead to unauthorized actions being performed in the context of the user’s session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
KeyShot Viewer 2023.3_12.2.1.2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
