CVE-2024-5602: Stack-based Buffer Overflow Vulnerability in NI I/O Trace Tool
A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted nitrace file.
The NI I/O Trace tool is installed as part of the NI System Configuration utilities included with many NI software products. Refer to the NI Security Advisory for identifying the version of NI IO Trace.exe installed. The NI I/O Trace tool was also previously released as NI Spy.
Other sources
A stack-based buffer overflow vulnerability due to a missing bounds check in the NI I/O Trace Tool may result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted nitrace file.
The NI I/O Trace tool is installed as part of the NI System Configuration utilities included with many NI software products.? Refer to the NI Security Advisory for identifying the version of NI IO Trace.exe installed. The NI I/O Trace tool was also previously released as NI Spy.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5602?
CVE-2024-5602 is classified as a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2024-5602?
To fix CVE-2024-5602, update the NI I/O Trace Tool to the latest version as provided by the vendor.
What type of vulnerability is CVE-2024-5602?
CVE-2024-5602 is a stack-based buffer overflow vulnerability.
What is required for an attacker to exploit CVE-2024-5602?
Exploitation of CVE-2024-5602 requires an attacker to provide the user with a specially crafted nitrace file.
Which software is affected by CVE-2024-5602?
CVE-2024-5602 affects the National Instruments I/O Trace Tool.