CVE-2024-7324: IObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path

Published Jul 31, 2024

Updated

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The associated identifier of this vulnerability is VDB-273247. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

IObit iTop Data Recovery Pro

Event History

Jul 31, 2024

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7324?

CVE-2024-7324 has been declared as critical.

What software is affected by CVE-2024-7324?

CVE-2024-7324 affects IObit iTop Data Recovery Pro version 4.4.0.687.

What type of vulnerability is CVE-2024-7324?

CVE-2024-7324 involves an uncontrolled search path in the BPL Handler component.

How can I mitigate the risks associated with CVE-2024-7324?

Mitigation for CVE-2024-7324 involves ensuring that the IObit iTop Data Recovery Pro software is updated to the latest version that addresses this vulnerability.

What is the impact of CVE-2024-7324?

The impact of CVE-2024-7324 can lead to unauthorized access to potentially sensitive data through the exploitation of the vulnerability.