{"id":"CVE-2024-7825","state":"PUBLISHED","title":"Type confusion that can cause the WRSA.exe service to crash and generate a crash dump","description":"Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3.","publishedAt":"2024-10-03T17:05:36.282Z","updatedAt":"2024-10-03T17:46:06.996Z","severity":{"score":6.2,"label":"Medium","version":"2.0","vector":"AV:L/AC:L/Au:S/C:C/I:N/A:C","source":"OpenText"},"assigner":"OpenText","products":["Webroot SecureAnywhere - Web Shield"],"affected":[{"vendor":"Webroot","product":"SecureAnywhere - Web Shield","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.1.2.3","versionType":"custom"}],"modules":["wrUrl.dll"],"platforms":["Windows","ARM","64 bit","32 bit"]}],"references":["https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275"],"weaknesses":["CWE-843"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7825.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-7825","state":"PUBLISHED","datePublished":"2024-10-03T17:05:36.282Z","dateUpdated":"2024-10-03T17:46:06.996Z","assignerShortName":"OpenText","assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateReserved":"2024-08-14T21:48:56.011Z"},"containers":{"cna":{"title":"Type confusion that can cause the WRSA.exe service to crash and generate a crash dump","descriptions":[{"lang":"en","value":"Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shield: before 2.1.2.3."}],"affected":[{"vendor":"Webroot","product":"SecureAnywhere - Web Shield","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.1.2.3","versionType":"custom"}],"modules":["wrUrl.dll"],"platforms":["Windows","ARM","64 bit","32 bit"]}],"references":[{"url":"https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275"}],"metrics":[{"cvssV2_0":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"SINGLE","availabilityImpact":"COMPLETE","baseScore":6.2,"confidentialityImpact":"COMPLETE","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:S/C:C/I:N/A:C","version":"2.0"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OpenText","orgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateUpdated":"2024-10-03T17:05:36.282Z"},"credits":[{"lang":"en","type":"finder","value":"Exodus Intelligence (exodusintel.com)"}],"impacts":[{"capecId":"CAPEC-212","descriptions":[{"lang":"en","value":"CAPEC-212 Functionality Misuse"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-03T17:44:15.462554Z","id":"CVE-2024-7825","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-03T17:46:06.996Z"}}]}}}