CVE-2024-25003

Summary

CVE-2024-25003 is a vulnerability that affects KiTTY versions 0.76.1.13 and earlier. It is a stack-based buffer overflow vulnerability that occurs due to insufficient input sanitization and bounds checking in the hostname field. This vulnerability allows an attacker to overwrite adjacent memory, leading to arbitrary code execution. The affected products include various versions of jJ0tf6, jJ0tf7, jJ0tf4, and others. The base severity of this vulnerability is rated as HIGH with a score of 7.8 out of 10 by [email protected]. The potential danger it poses to organizations is high, with a high impact on confidentiality and integrity, as well as a high availability impact. To remediate this vulnerability, users should update their KiTTY software to a version later than 0.76.1.13 to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.