CVE Catalog
CVE-2024-3566
CriticalSummary
A command injection vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when specific conditions are satisfied.
Risk Assessment
An attacker could exploit this vulnerability to execute unauthorized commands, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update applications and monitor and restrict access to the CreateProcess function to minimize risk.
Original NVD description (English source)
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.