CVE-2024-0771CWE-119

Nsasoft Product Key Explorer Registration memory corruption

Medium · published January 21, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
21.9
In the wild
Unconfirmed
What it is

A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00304 · 21.9th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2024-01-21T23:00Z
EPSS history
Timeline
  • 21 JAN 23:00Z
    Nsasoft Product Key Explorer Registration memory corruption
    cvelistv5