CVE-2024-7886CWE-426CWE-427

Scooter Software Beyond Compare 7zxa.dll uncontrolled search path

High · published August 16, 2024

CVSS v4.0
8.5
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

A vulnerability has been found in Scooter Software Beyond Compare up to 3.3.5.15075 and classified as critical. Affected by this vulnerability is an unknown functionality in the library 7zxa.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The real existence of this vulnerability is still doubted at the moment. The vendor explains that a system must be breached before exploiting this issue. They are not planning on making any changes to address it.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00193 · 8.5th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-427 · Uncontrolled Search Path Element
Published
2024-08-16T21:31Z
EPSS history
Timeline
  • 16 AUG 21:31Z
    Scooter Software Beyond Compare 7zxa.dll uncontrolled search path
    cvelistv5