CVE-2024-28583: Buffer Overflow

Published Mar 20, 2024

Updated

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format.

Affected Software

2 affected components

Freeimage Project Freeimage=3.19.0

FreeImage FreeImage=3.19.0

Event History

Mar 20, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-28583?

CVE-2024-28583 is classified as a high severity vulnerability due to its potential to allow local attackers to execute arbitrary code.

How do I fix CVE-2024-28583?

To fix CVE-2024-28583, update FreeImage to version 3.19.1 or later, which addresses the buffer overflow issue.

What types of attacks can CVE-2024-28583 enable?

CVE-2024-28583 can enable local attackers to execute arbitrary code by exploiting the vulnerable readLine() function in FreeImage.

Which versions of FreeImage are affected by CVE-2024-28583?

CVE-2024-28583 affects FreeImage version 3.19.0, specifically the r1909 release.

Can CVE-2024-28583 be exploited remotely?

CVE-2024-28583 is a local vulnerability, meaning it requires local access for exploitation, and cannot be exploited remotely.