Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-37284

Elastic Defend Improper Handling of Alternate Encoding Leads to Crash

Description

Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing the process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Elastic Defend

Default version status: unaffected

  • 8.0.0 to < 8.13.3affected

References