Remote Code Execution Vulnerability in Luxion KeyShot Viewer Due to KSP File Parsing Stack-Based Buffer Overflow

CVE-2024-5507

Summary

A stack-based buffer overflow vulnerability exists in Luxion KeyShot Viewer due to inadequate validation of the length of user-supplied data during the parsing of KSP files. This flaw allows remote attackers to potentially execute arbitrary code on affected systems. Exploitation of this vulnerability requires user interaction, as the user must either visit a malicious web page or open a malicious KSP file. The security risk is considerable, as successful exploitation can lead to unauthorized actions being performed in the context of the user’s session.

References