CVE-2024-48605

ALTO 7.8CVE-2024-48605 · Published 22/10/2024 · updated 17/06/2026

In breve

CVE-2024-48605 è una vulnerabilità ALTO (CVSS 7.8) che riguarda helakuru (helakuru).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.53%, superiore al 45.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
helakuru helakuru	`= 1.1`	No fix yet

Description

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file.

References

clement.notin.org/blog/2020/09/12/CVE-2020-7315-McAfee-Agent-DLL-injection · Not Applicable
surajhacx/HelakuruV.1.1-DLLHijack · Exploit
medium.com/%40xNEED/dll-hijacking-jagexlauncher-819599165822 · Not Applicable
exploit-db.com/exploits/51461 · Not Applicable

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free