The version of National Instruments (NI) LabVIEW installed on the remote Windows host is affected by multiple vulnerabilities:

  - An out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code     execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This     vulnerability affects LabVIEW 2024 Q1 and prior versions. (CVE-2024-4079)

  - A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result     in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially     crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions. (CVE-2024-4080)

  - A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in     arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI.
    This vulnerability affects NI LabVIEW 2024 Q1 and prior versions. (CVE-2024-4081)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

National Instruments LabVIEW < 2024 Q3 Multiple Vulnerabilities

high Nessus Plugin ID 204716

Version 1.8