CVE-2024-0771 - Nsasoft Product Key Explorer Registration memory corruption

Back Back to CVE browser

MEDIUM

Nsasoft Product Key Explorer Registration memory corruption

Published Jan 21, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Nsasoft Product Product Key Explorer Default
n/a
- Version
  4.0.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Nsasoft

Product Key Explorer

n/a

Version	Status	Constraints
4.0.9	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (3)

https://vuldb.com/?ctiid.251671
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.251671
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
https://youtu.be/eecN5mC0avU
exploitmedia-coverage

Link	Providers	Tags
https://vuldb.com/?ctiid.251671		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.251671		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
https://youtu.be/eecN5mC0avU		exploitmedia-coverage