CVE-2024-45144

Name of the Vulnerable Software and Affected Versions Substance 3D Stager versions 3.0.3 and earlier

Description The issue is caused by a buffer overflow in dynamic memory, which could allow an attacker to execute arbitrary code in the context of the current user by using a specially crafted file. Exploitation of this issue requires user interaction, where a victim must open a malicious file. This can result in arbitrary code execution in the context of the current user.

Recommendations For versions 3.0.3 and earlier, update to a version later than 3.0.3 to resolve the issue. As a temporary workaround, consider avoiding the use of files from untrusted sources to minimize the risk of exploitation.