VDB
BDU%3A2024-06717
BDU%3A2024-06717
PUBLISHED
CVSS 8.199999809265137 HIGH
Уязвимость функция std::process::Command компонента File Extension языка программирования Rust операционных систем Windows, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| The Rust Foundation | Rust | |
| rust-lang | rust | < 1.81.0 |
| rust-lang | rust | 0 |
Timeline
- Sep 4, 2024 CVE Published
- Sep 4, 2024 PoC Published
- Sep 6, 2024 CVE Updated
- Jul 19, 2025 PoC Published
- Jul 20, 2025 PoC Published
References
- https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html url
- https://learn.microsoft.com/en-us/troubleshoot/windows-client/shell-experience/file-folder-name-whitespace-characters url
- https://blog.rust-lang.org/2024/09/04/cve-2024-43402.html advisory
- https://github.com/rust-lang/rust/security/advisories/GHSA-2xg3-7mm6-98jj advisory
- https://vulners.com/nvd/NVD:CVE-2024-43402 url
- https://vuldb.com/?id.276509 url