CVE-2024-7886
Scooter Software Beyond Compare 7zxa.dll uncontrolled search path
- State
- Published
- Severity
- 8.5 High
- Published
- Aug 16, 2024
- Updated
- Jan 10, 2025
- Reserved
- Aug 16, 2024
Description
A vulnerability has been found in Scooter Software Beyond Compare up to 3.3.5.15075 and classified as critical. Affected by this vulnerability is an unknown functionality in the library 7zxa.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The real existence of this vulnerability is still doubted at the moment. The vendor explains that a system must be breached before exploiting this issue. They are not planning on making any changes to address it.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Beyond CompareScooter Software |
|
References
- VDB-274873 | Scooter Software Beyond Compare 7zxa.dll uncontrolled search pathvdb-entry
- VDB-274873 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #383468 | Beyond Compare Bcompare 3.3.5.15075 DLL Hijackingthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.