JVNDB-2024-000025

Vulnerability from jvndb - Published: 2024-02-29 15:40 - Updated:2024-02-29 15:40
Severity ?
2.7 (Low) - cvssV3_0 - CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
Summary
Protection mechanism failure in RevoWorks
Details
RevoWorks SCVX and RevoWorks Browser provided by J's Communication Co., Ltd. enable users to execute web browsers in the sandboxed environment isolated from the client's local environment. In the products, file exchange between the sandboxed environment and local environment is prohibited in principle, but by using the optional "VirusChecker" or "ThreatChecker" feature and changing the policy settings, files checked for viruses by these features in the sandboxed environment can be permitted to be downloaded to the local environment. However, there is a vulnerability (CWE-693) in the products where malware detection is failed when data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi) in the sandboxed environment J's Communication Co., Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and J's Communication Co., Ltd. coordinated under the Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000025.html",
  "dc:date": "2024-02-29T15:40+09:00",
  "dcterms:issued": "2024-02-29T15:40+09:00",
  "dcterms:modified": "2024-02-29T15:40+09:00",
  "description": "RevoWorks SCVX and RevoWorks Browser provided by J\u0027s Communication Co., Ltd. enable users to execute web browsers in the sandboxed environment isolated from the client\u0027s local environment.\r\nIn the products, file exchange between the sandboxed environment and local environment is prohibited in principle, but by using the optional \"VirusChecker\" or \"ThreatChecker\" feature and changing the policy settings, files checked for viruses by these features in the sandboxed environment can be permitted to be downloaded to the local environment.\r\n\r\nHowever, there is a vulnerability (CWE-693) in the products where malware detection is failed when data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi) in the sandboxed environment\r\n\r\nJ\u0027s Communication Co., Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and J\u0027s Communication Co., Ltd. coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000025.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:jscom:revoworks_browser",
      "@product": "RevoWorks Browser",
      "@vendor": "J\u0027s Communication Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:jscom:revoworks_scvx",
      "@product": "RevoWorks SCVX",
      "@vendor": "J\u0027s Communication Co., Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "2.7",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2024-000025",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN35928117/index.html",
      "@id": "JVN#35928117",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-25091",
      "@id": "CVE-2024-25091",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Protection mechanism failure in RevoWorks"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.