Wondershare Filmora 14.5.16 Installer NFWCHK.exe kura hakki ndiyam

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a Wondershare Filmora 14.5.16. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare CRYPTBASE.dll, a cikin fayil NFWCHK.exe, a cikin sashi Installer. Wuro manipulation ga kura hakki ndiyam. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-427. Lalle, rauni an sanar da shi 05/25/2025. Ana samun bayanin tsaro don saukewa a gist.github.com. Ana kiran wannan rauni da CVE-2025-5180. Wuroo ka a yiɗi a yi ɗum e gese. Bayani na fasaha ga. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a gist.github.com. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get best quality of vulnerability data, you may have to visit VulDB.

3 Goyarwa · 88 Datenpunkte

FurɗeSúgá
05/25/2025 19:21		Gargadi 1/2
05/26/2025 12:30		Gargadi 2/2
05/26/2025 14:11
software_vendorWondershareWondershareWondershare
software_nameFilmoraFilmoraFilmora
software_version14.5.1614.5.1614.5.16
software_componentInstallerInstallerInstaller
software_fileNFWCHK.exeNFWCHK.exeNFWCHK.exe
software_libraryCRYPTBASE.dllCRYPTBASE.dllCRYPTBASE.dll
vulnerability_cweCWE-427 (kura hakki ndiyam)CWE-427 (kura hakki ndiyam)CWE-427 (kura hakki ndiyam)
vulnerability_risk111
cvss3_vuldb_avLLL
cvss3_vuldb_acHHH
cvss3_vuldb_prLLL
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cHHH
cvss3_vuldb_iHHH
cvss3_vuldb_aHHH
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
advisory_urlhttps://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80
exploit_availability111
exploit_publicity111
exploit_urlhttps://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80
source_cveCVE-2025-5180CVE-2025-5180CVE-2025-5180
cna_responsibleVulDBVulDBVulDB
response_summaryThe vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.
cvss2_vuldb_avLLL
cvss2_vuldb_acHHH
cvss2_vuldb_ciCCC
cvss2_vuldb_iiCCC
cvss2_vuldb_aiCCC
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss4_vuldb_avLLL
cvss4_vuldb_acHHH
cvss4_vuldb_prLLL
cvss4_vuldb_uiNNN
cvss4_vuldb_vcHHH
cvss4_vuldb_viHHH
cvss4_vuldb_vaHHH
cvss4_vuldb_ePPP
cvss2_vuldb_auSSS
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss4_vuldb_atNNN
cvss4_vuldb_scNNN
cvss4_vuldb_siNNN
cvss4_vuldb_saNNN
cvss2_vuldb_basescore6.06.06.0
cvss2_vuldb_tempscore5.15.15.1
cvss3_vuldb_basescore7.07.07.0
cvss3_vuldb_tempscore6.46.46.4
cvss3_meta_basescore7.07.07.0
cvss3_meta_tempscore6.46.76.7
cvss4_vuldb_bscore7.37.37.3
cvss4_vuldb_btscore6.46.46.4
advisory_date1748124000 (05/25/2025)1748124000 (05/25/2025)1748124000 (05/25/2025)
price_0day$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_avLL
cvss4_cna_acHH
cvss4_cna_atNN
cvss4_cna_prLL
cvss4_cna_uiNN
cvss4_cna_vcHH
cvss4_cna_viHH
cvss4_cna_vaHH
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore7.37.3
cvss3_cna_avLL
cvss3_cna_acHH
cvss3_cna_prLL
cvss3_cna_uiNN
cvss3_cna_sUU
cvss3_cna_cHH
cvss3_cna_iHH
cvss3_cna_aHH
cvss3_cna_basescore77
cvss2_cna_avLL
cvss2_cna_acHH
cvss2_cna_auSS
cvss2_cna_ciCC
cvss2_cna_iiCC
cvss2_cna_aiCC
cvss2_cna_basescore66
cve_nvd_summaryesSe ha detectado una vulnerabilidad clasificada como crítica en Wondershare Filmora 14.5.16. Este problema afecta a una funcionalidad desconocida en la librería CRYPTBASE.dll del archivo NFWCHK.exe del instalador de componentes. Esta manipulación genera una ruta de búsqueda incontrolada. Es necesario realizar un ataque local. Es un ataque de complejidad bastante alta. Parece difícil de explotar. Se ha hecho público el exploit y puede que sea utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió.

◂ GurɗoGumtiGada ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!