Uncontrolled Search Path Vulnerability in iTop Data Recovery Pro

CVE-2024-7324

What is CVE-2024-7324?

A vulnerability exists in the IObit iTop Data Recovery Pro version 4.4.0.687, specifically in the madbasic_.bpl library, utilized by the BPL Handler component. This issue allows for exploitation through an uncontrolled search path, which could potentially lead to the execution of arbitrary code or files without proper validation. To execute this attack, local access to the system is required, emphasizing the need for secure local user practices. Despite notifications regarding this vulnerability, there has been a lack of response from IObit, highlighting the importance of users being proactive in applying relevant security measures.

References