CVE-2024-23742: Code Injection
Published Jan 28, 2024
·Updated
An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor disputes this because it requires local access to a victim's machine.
Affected Software
1 affected component
Loom Loom Macos<=0.196.1
Event History
Jan 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23742?
CVE-2024-23742 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
Who is affected by CVE-2024-23742?
CVE-2024-23742 affects users of Loom on macOS version 0.196.1 and earlier.
3
How do I fix CVE-2024-23742?
To remediate CVE-2024-23742, update Loom to version 0.196.2 or later.
4
Can CVE-2024-23742 be exploited remotely?
CVE-2024-23742 requires local access for exploitation, according to the vendor's statement.
5
What actions should I take regarding CVE-2024-23742?
Users should immediately update their Loom software to mitigate the risks associated with CVE-2024-23742.