CVE-2024-39772: Silent Desktop Screenshot Capture
Published Sep 16, 2024
·Updated
Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.
Affected Software
2 affected componentsFixes available
npm/mattermost-desktop<5.9.0
5.9.0
Mattermost Mattermost Desktop<5.9.0
Remediation
Information
Update Mattermost Desktop App to versions 5.9.0 or higher.
Event History
Sep 16, 2024
CVE Published
via MITRE·02:27 PM
Data Sourced
via MITRE·02:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:32 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-39772?
CVE-2024-39772 has a high severity due to its potential for unauthorized screen capture.
2
How do I fix CVE-2024-39772?
To fix CVE-2024-39772, update to Mattermost Desktop App version 5.9.0 or later.
3
Which versions are affected by CVE-2024-39772?
CVE-2024-39772 affects all Mattermost Desktop App versions up to and including 5.8.0.
4
What does CVE-2024-39772 exploit?
CVE-2024-39772 exploits a failure in the screen capture functionality allowing unauthorized screenshots.
5
Is CVE-2024-39772 related to JavaScript?
Yes, CVE-2024-39772 allows attackers to utilize JavaScript APIs to capture screens silently.