CVE-2024-43635
Integer Overflow or Wraparound (CWE-190)
Summary
Windows Telephony Service Remote Code Execution Vulnerability. This is a high-severity vulnerability with a CVSS base score of 8.8. It affects the Windows Telephony Service and allows for remote code execution. The attack vector is network-based, with low attack complexity and no privileges required. However, user interaction is required for exploitation. The vulnerability is associated with an Integer Overflow or Wraparound issue.
Impact
If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code on the target system with the same privileges as the Windows Telephony Service. Given the high impact on confidentiality, integrity, and availability, an attacker could potentially gain control over the affected system, access sensitive information, modify data, or disrupt service availability. The attack can be initiated remotely over the network, making it particularly dangerous for internet-connected systems.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
A patch is available. Microsoft has released an official fix for this vulnerability as of November 12, 2024.
Mitigation
1. Apply the official patch released by Microsoft as soon as possible. 2. Implement network segmentation to limit exposure of systems running the Windows Telephony Service. 3. Monitor for suspicious activities related to the Windows Telephony Service. 4. Educate users about the risks of interacting with unsolicited or suspicious content, as user interaction is required for exploitation. 5. Consider disabling the Windows Telephony Service if it's not essential for your operations. 6. Keep all Windows systems and software up to date with the latest security patches. 7. Implement the principle of least privilege to minimize the potential impact of exploitation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Timeline
Detection for the vulnerability has been added to Qualys (92186)
A CVSS base score of 8.8 has been assigned.
Feedly found the first article mentioning CVE-2024-43635. See article
Feedly estimated the CVSS score as HIGH
NVD published the first details for CVE-2024-43635
Detection for the vulnerability has been added to Nessus (210865)
Detection for the vulnerability has been added to Nessus (210863)
Detection for the vulnerability has been added to Nessus (210858)
Detection for the vulnerability has been added to Nessus (210855)