CVE-2025-24845
- State
- Published
- Severity
- 6.3 Medium
- Published
- Feb 6, 2025
- Updated
- Feb 12, 2025
- Reserved
- Jan 27, 2025
Description
Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.3 Medium | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H | jpcert |
Weaknesses
- CWE-88 Improper neutralization of argument delimiters in a command ('Argument Injection')
Affected Products
| Product | Versions |
|---|---|
Defense Platform Home EditionHumming Heads Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.