vendor:
KiTTY
by:
DEFCESCO (Austin A. DeFrancesco)
6.1
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: KiTTY
Affected Version From: ≤ 0.76.1.13
Affected Version To: 0.76.1.13
Patch Exists: NO
Related CWE: CVE-2024-25004
CPE: a:kitty_project:kitty:0.76.1.13
Platforms Tested: Microsoft Windows 11/10/8/7/XP
2024
KiTTY 0.76.1.13 – ‘Start Duplicated Session Username’ Buffer Overflow
The exploit allows an attacker to execute arbitrary code by exploiting a buffer overflow vulnerability in KiTTY version 0.76.1.13. By sending a specially crafted payload, an attacker can trigger the overflow and potentially gain remote access to the affected system. This vulnerability has been assigned CVE-2024-25004.
Mitigation:
To mitigate this vulnerability, users are advised to update KiTTY to a version higher than 0.76.1.13. Additionally, users should avoid opening untrusted sessions or accepting data from untrusted sources.
