CVE-2024-4978highunder attackCWE-506

CVE-2024-4978: high-severity vulnerability in Justice AV Solutions Viewer

Malicious Code in Justice AV Solutions (JAVS) Viewer

Published · Updated

Follow this CVE+ Monitor Viewer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

56Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.7epss 27%
from disclosure to weapon
Published on NVDMay 23
CISA KEV+6d
Action required by CISAfederal deadline: 2024-06-19

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

The Justice AV Solutions Viewer installer version 8.3.7.250-1 contains malicious code that allows someone with system access to run unauthorized PowerShell commands. This is dangerous because it can compromise your computer's security and allow attackers to take control.

Technical detail

CVE-2024-4978 involves a trojanized installer for Justice AV Solutions Viewer that executes malicious payloads upon installation, signed with a fraudulent authenticode certificate. A privileged local or remote attacker can exploit this to execute arbitrary PowerShell commands with elevated privileges, bypassing application-level security controls.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
Justice AV Solutions · Viewer