CVE-2024-7325: IObit Driver Booster BPL VCL120.BPL uncontrolled search path

Published Jul 31, 2024

Updated

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The identifier of this vulnerability is VDB-273248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

IObit Driver Booster=11.0.0.0

Event History

Jul 31, 2024

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

DescriptionSeverityWeakness

Dec 6, 56679

Event

via FIRST·04:41 PM

Frequently Asked Questions

What is the severity of CVE-2024-7325?

CVE-2024-7325 has been rated as critical due to its potential impact.

How do I fix CVE-2024-7325?

To fix CVE-2024-7325, update IObit Driver Booster to the latest version available.

What component is affected by CVE-2024-7325?

CVE-2024-7325 affects the VCL120.BPL library within the BPL Handler component.

Can CVE-2024-7325 be exploited remotely?

CVE-2024-7325 requires local access for exploitation.

What kind of vulnerability is CVE-2024-7325 related to?

CVE-2024-7325 is related to uncontrolled search path manipulation.