nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-8067 CVE-2024-8067
MEDIUM
Unicode "best fit" argument injection
Record summary
CVE-2024-8067 has a selected CVSS score of 5.8 (medium).
Description
In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument injection was identified.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 24, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Helix CoreBrowse Helix / Helix CoreDefault status: unaffected | CVE List | 2024.1 to ≤ 2024.1 Patch 2 (2024.1/2655224) | affected |
helix_coreBrowse perforce / helix_coreDefault status: unknown | CVE List | Through 2024.1patch2-2021.1/2655224 | affected |
References
2portal.perforce.com
https://portal.perforce.com/s/detail/a91PA000001SXEzYAO