KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

CVE-2024-5509

Summary

A vulnerability has been identified in Luxion KeyShot's processing of BIP files, specifically related to the uncontrolled search path element. This flaw allows remote attackers to execute arbitrary code on systems where the software is installed, provided that the victim interacts with a malicious page or file. The root of the issue lies in the improper loading of libraries from insecure locations, which can be exploited to run code in the context of the affected application. Users are advised to take precautionary measures to mitigate potential security risks.

References