cve/2024/CVE-2024-48605.md

CVE-2024-48605

Description

An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file.

POC

Reference

• https://medium.com/@xNEED/dll-hijacking-jagexlauncher-819599165822
• https://www.exploit-db.com/exploits/51461

Github

• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/surajhacx/HelakuruV.1.1-DLLHijack