ГлавнаяУязвимости → CVE-2024-39684
7.8высокая

CVE-2024-39684

→ есть в БДУ: BDU:2024-06230 (на русском)
Описание (на английском; русское — в БДУ выше)

Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege.

CVSS
Балл7.8 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Источники
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39684https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39684https://security.netapp.com/advisory/ntap-20240905-0003/