CVE-2024-7324 — IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path

CVE-2024-7324

IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path PUBLISHED

Description (CNA)

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic_.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The associated identifier of this vulnerability is VDB-273247. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
IObit / iTop Data Recovery Pro	affected 4.4.0.687

CWE

CWE-427

References

https://vuldb.com/?id.273247
https://vuldb.com/?ctiid.273247
https://vuldb.com/?submit.378138

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.