PT-2024-31824 · Bandisoft · Bandiview

Published 2024-10-03 · Updated 2025-02-24 · CVE-2024-45872

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Bandisoft BandiView version 7.05

Description The issue is a buffer overflow vulnerability that occurs due to insufficient validation of PSD files. This happens through the sub 0x410d1d function.

Recommendations For Bandisoft BandiView version 7.05, consider disabling the handling of PSD files until a patch is available to prevent potential exploitation. Restrict access to the sub 0x410d1d function to minimize the risk of buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2024-45872

Affected Products

Bandiview

References · 9

• 🔥 https://github.com/Jaecho6053/BandiView_PoC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-45872 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45872 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1841923354439102825 · Twitter Post
• https://twitter.com/CVEnew/status/1841882267523940775 · Twitter Post
• https://t.me/cybersecuritytechnologies/11850 · Telegram Post
• https://twitter.com/bshyuunn/status/1841913415012647141 · Twitter Post
• https://twitter.com/ksg93rd/status/1894043755583242557 · Twitter Post
• https://t.me/cvedetector/6915 · Telegram Post