Unknown · Clementine · CVE-2024-50986
Name of the Vulnerable Software and Affected Versions:
Clementine version 1.3.1
Description:
The issue allows a local attacker to execute arbitrary code via a crafted DLL file. This can be exploited by a local attacker.
Recommendations:
For Clementine version 1.3.1, consider restricting access to the application to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the application with untrusted DLL files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.