PT-2024-3609 · Microsoft · Windows Dwm Core Library+1

He Yisheng + 1 · Published 2024-05-14 · Updated 2025-01-16 · CVE-2024-30008

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library (affected versions not specified)

Description: The issue is related to an integer overflow in the Windows DWM Core Library, which can be exploited to disclose protected information. This allows attackers to obtain sensitive information and potentially affect the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

BDU:2024-03925

CVE-2024-30008

Affected Products

Windows

Windows Dwm Core Library

References · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30008 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-30008 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-30008 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03925 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30008 · Security Note