High severity · published Dec 9, 2024
CVE-2024-12354
SourceCodester Phone Contact Manager System User Menu MenuDisplayStart buffer overflow
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Phone Contact Manager System · SourceCodester
1.0 · source: vendor, NVD
PS
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-12354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-12354
Exploit
https://github.com/jasontimwong/CVE/issues/2
Permissions Required
https://vuldb.com/?ctiid.287274
Third Party Advisory
https://vuldb.com/?id.287274
Third Party Advisory
https://vuldb.com/?submit.457477
Product
https://www.sourcecodester.com/
More from Phone Contact Manager System
7.8
CVE-2024-12355
SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation
7.8
CVE-2024-12353
SourceCodester Phone Contact Manager System User Menu MenuDisplayStart input validation