Integer overflow in Microsoft Windows and Windows Server - CVE-2024-43495

Vulnerability identifier: #VU97065

CSH Severity: Medium

CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-43495

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in Windows libarchive. A remote user can trick a victim to open a specially crafted RAR file, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Microsoft Windows
Windows Server
openEuler
libarchive
bsdcat
bsdcpio
bsdtar
bsdunzip
libarchive-debuginfo
libarchive-debugsource
libarchive-devel
libarchive-help

Install updates from vendor's website.

Microsoft Windows - addressed in versions 11 22H2 10.0.22621.3880, 11 23H2 10.0.22631.3880, 11 24H2 10.0.26100.1742
Windows Server - update to 2022 23H2 10.0.25398.1009
libarchive - update to 3.7.1-4
bsdcat - update to 3.7.1-4
bsdcpio - update to 3.7.1-4
bsdtar - update to 3.7.1-4
bsdunzip - update to 3.7.1-4
libarchive-debuginfo - update to 3.7.1-4
libarchive-debugsource - update to 3.7.1-4
libarchive-devel - update to 3.7.1-4
libarchive-help - update to 3.7.1-4

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43495

• Integer overflow in Microsoft Windows libarchive
• openEuler 24.03 LTS update for libarchive