PT-2024-14938
CVE-2023-6362
·
Published
2024-10-07
·
Updated
2024-10-11
Description by
CVSS 3.1
7.3
HighMetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Winhex versions 16.1 SR-1 and 20.4
Description
A buffer overflow vulnerability has been discovered in Winhex, affecting the Structured Exception Handler (SEH) registers. This could allow attackers to execute arbitrary code via a long filename argument.
Recommendations
For version 16.1 SR-1, update to a newer version to mitigate the risk.
For version 20.4, update to a newer version to mitigate the risk.
As a temporary workaround, consider restricting the use of long filename arguments until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾