Wibu

Codemeter Runtime

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-3935

  • EPSS 0.22%
  • Published 13.09.2023 14:15:09
  • Last modified 21.11.2024 08:18:21

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

7.1

CVE-2021-41057

  • EPSS 0.17%
  • Published 14.11.2021 21:15:07
  • Last modified 21.11.2024 06:25:21

In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.

7.2

CVE-2014-8419

  • EPSS 0.03%
  • Published 26.11.2014 15:59:06
  • Last modified 12.04.2025 10:46:40

Wibu-Systems CodeMeter Runtime before 5.20 uses weak permissions (read and write access for all users) for codemeter.exe, which allows local users to gain privileges via a Trojan horse file.

5

CVE-2011-4057

  • EPSS 5.77%
  • Published 13.01.2012 18:55:03
  • Last modified 11.04.2025 00:51:21

Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (CodeMeter.exe crash) via certain crafted packets to TCP port 22350.