CVE-2024-7825

The vulnerability results from improper handling of data types in the wrUrl.Dll library that is part of the Web Shield module. An attacker can provide data that is interpreted by the component as a different type than what it actually represents (Type Confusion). This leads to a state in which the application logic performs operations on resources in a manner inconsistent with their actual type, resulting in unexpected behavior and the possibility of functionality misuse. The vulnerability is remotely exploitable and requires no privileges or user interaction.

An attacker can gain unauthorized access to sensitive data, modify data or system resources, and cause system unavailability — corresponding to a full high-level CIA triad (confidentiality, integrity, availability).

Webroot SecureAnywhere Web Shield must be updated to version 2.1.2.3 or later. Patch details are available in the vendor's references at: https://answers.webroot.com/Webroot/ukp.aspx?pid=12&app=vw&vw=1&login=1&json=1&solutionid=4275

Webroot SecureAnywhere Web Shield on Windows platform (ARM, 64-bit, 32-bit architectures) — all versions prior to 2.1.2.3 (wrUrl.Dll module).