Vulnerability · Published Jul 31, 2024 · Assigned by VulDB
CVE-2024-7325IObit Driver Booster BPL VCL120.BPL uncontrolled search path
High 7.8
In plain English
A high-severity uncontrolled search path in Driver Booster from IObit. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Official description
A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The identifier of this vulnerability is VDB-273248. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IObit | Driver Booster | 11.0.0.0 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- VDB-273248 | IObit Driver Booster BPL VCL120.BPL uncontrolled search path vdb-entry
- VDB-273248 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #378139 | Iobit Driver Booster 11.0.0.0 Uncontrolled Search Path third-party-advisory