PT-2024-28103 · V-Server+1 · V-Server+1

Michael Heinzl

·

Published

2024-11-28

·

Updated

2024-12-03

·

CVE-2024-38658

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions V-Server versions 4.0.19.0 and earlier V-Server Lite versions 4.0.19.0 and earlier
Description There is an out-of-bounds read issue in the software. If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.
Recommendations For V-Server versions 4.0.19.0 and earlier, update to a version later than 4.0.19.0 to resolve the issue. For V-Server Lite versions 4.0.19.0 and earlier, update to a version later than 4.0.19.0 to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted files until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-38658

Affected Products

V-Server
V-Server Lite