CVE-2024-39684
EUVD-2024-3818609.07.2024, 19:15
Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege.Enginsight
Awaiting analysis
This vulnerability is currently awaiting analysis.
Windows Releases
Platform | Version | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows 10 |
| ||||||||||
| Windows 11 |
| ||||||||||
| Windows Server 2008 |
| ||||||||||
| Windows Server 2008 R2 |
| ||||||||||
| Windows Server 2012 |
| ||||||||||
| Windows Server 2012 R2 |
| ||||||||||
| Windows Server 2016 |
| ||||||||||
| Windows Server 2019 |
| ||||||||||
| Windows Server 2022 |
|
Debian Releases
Ubuntu Releases