CVE-2024-1187

A vulnerability, which was classified as problematic, has been found in Munsoft Easy Outlook Express Recovery 2.0. This issue affects some unknown processing of the component Registration Key Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-252677 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:munsoft:easy_outlook_express_recovery:2.0:*:*:*:*:*:*:*

History

10 Feb 2024, 01:34

Type Values Removed Values Added
CVSS v2 : 1.7
v3 : 3.3
v2 : 1.7
v3 : 5.5
CPE cpe:2.3:a:munsoft:easy_outlook_express_recovery:2.0:*:*:*:*:*:*:*
References () https://fitoxs.com/vuldb/13-exploit-perl.txt - () https://fitoxs.com/vuldb/13-exploit-perl.txt - Exploit
References () https://vuldb.com/?ctiid.252677 - () https://vuldb.com/?ctiid.252677 - Permissions Required
References () https://vuldb.com/?id.252677 - () https://vuldb.com/?id.252677 - Permissions Required
Summary
  • (es) Una vulnerabilidad fue encontrada en Munsoft Easy Outlook Express Recovery 2.0 y clasificada como problemática. Este problema afecta a un procesamiento desconocido del componente Registration Key Handler. La manipulación conduce a la denegación del servicio. Se requiere acceso local para abordar este ataque. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-252677. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.
First Time Munsoft
Munsoft easy Outlook Express Recovery

02 Feb 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-02 18:15

Updated : 2024-04-11 01:24


NVD link : CVE-2024-1187

Mitre link : CVE-2024-1187

CVE.ORG link : CVE-2024-1187


JSON object : View

Products Affected

munsoft

  • easy_outlook_express_recovery
CWE
CWE-404

Improper Resource Shutdown or Release