CVE-2024-52066CWE-120
Potential stack corruption in Routing Service when using a malicious XML configuration document
High · published December 13, 2024
What it is
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40.
The record
Technical detail
- CVSS v4.0
- 8.3 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00288 · 20.2th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2024-12-13T10:23Z
EPSS history
Timeline