CVE-2024-41902CWE-121

A vulnerability has been identified in JT2Go (All versions < V2406.0003)

High · published October 8, 2024

CVSS v4.0
7.3
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2024-10-08T08:40Z
EPSS history
Timeline
  • 08 OCT 08:40Z
    A vulnerability has been identified in JT2Go (All versions < V2406.0003)
    cvelistv5