Buffer Overflow Vulnerability in NI I/O Trace Tool Could Lead to Arbitrary Code Execution

CVE-2024-5602

What is CVE-2024-5602?

The vulnerability arises from a stack-based buffer overflow in the NI I/O Trace Tool, caused by a missing bounds check. This flaw can potentially allow an attacker to execute arbitrary code on the vulnerable system. Exploitation requires that the victim open a specially crafted nitrace file, which poses a significant risk to the integrity and security of systems using this tool. The NI I/O Trace Tool is part of the NI System Configuration utilities and is utilized widely in various NI software environments, including instances where it functions under the previous name NI Spy. Users are encouraged to review the NI Security Advisory for more information on affected versions and to implement necessary measures promptly.

References