CVE-2024-28099 - VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries

Back Back to CVE browser

HIGH

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries

Published Apr 15, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.19%

Description

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.

Affected products

Vendor Keyence Corporation Product VT Studio Default
n/a
- Version
  Ver.8.32 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Keyence Corporation

VT Studio

n/a

Version	Status	Constraints
Ver.8.32 and earlier	affected	-

Vendor Keyence Product VT Studio Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=8.32

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Keyence

VT Studio

n/a

Version	Status	Constraints
0	affected	<=8.32

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25263
Advisory
https://jvn.jp/en/vu/JVNVU92825069/
Third Party Advisory
https://www.keyence.com/vt_vulnerability240329_en
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25263		Advisory
https://jvn.jp/en/vu/JVNVU92825069/		Third Party Advisory
https://www.keyence.com/vt_vulnerability240329_en		Vendor Advisory