CVE-2024-50307 — kubell Co., Ltd. / Chatwork Desktop Application (Windows)

CVE-2024-50307

kubell Co., Ltd. / Chatwork Desktop Application (Windows) PUBLISHED

Description (CNA)

Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application, an arbitrary file may be downloaded from an external website and executed. As a result, arbitrary code may be executed on the device that runs Chatwork Desktop Application (Windows).

Affected (CNA)

Vendor / product	Versions
kubell Co., Ltd. / Chatwork Desktop Application (Windows)	affected versions prior to 2.9.2

CWE

CWE-676

References

https://jvn.jp/en/jp/JVN78335885/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.