Description
When the webdriver for the Browser object downloads data from a HTTP server, the data pointer is set to NULL and is allocated only in curl_write_cb when receiving data. If the server's response is an empty document, then wd->data in the code below will remain NULL and an attempt to read from it will result in a crash.
INFO
Published Date :
2024-11-27T12:04:53.864Z
Last Modified :
2024-11-27T14:56:15.833Z
Source :
Zabbix
AFFECTED PRODUCTS
The following products are affected by CVE-2024-42328 vulnerability.
| Vendors | Products |
|---|---|
| Zabbix |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-42328.
| URL | Resource |
|---|---|
| https://support.zabbix.com/browse/ZBX-25624 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact