High severity · published Jul 31, 2024
CVE-2024-7325
A vulnerability was found in IObit Driver Booster 11.0.0.0
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The identifier of this vulnerability is VDB-273248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DB
Driver Booster · Iobit
11.0.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7325
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7325
Permissions Required
https://vuldb.com/?ctiid.273248
Third Party Advisory
https://vuldb.com/?id.273248
Third Party Advisory
https://vuldb.com/?submit.378139
More from Driver Booster
6.6
CVE-2022-24140
IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a…