PT-2024-1100

CVE-2024-20697

Published

2024-01-09

Updated

2025-03-31

Description by

CVSS 3.1

7.3

High

MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows libarchive (affected versions not specified)

Description The vulnerability is related to insufficient input validation in the libarchive library of the Windows operating system. It allows remote attackers to execute arbitrary code and affect the system. An attacker could exploit this bug by enticing a user into extracting a crafted RAR archive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Guy Lederfein

Jason Mcfadyen

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

CWE-122: Heap-based Buffer Overflow

Related identifiers

CVE-2024-20697