An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.
References
| Link | Resource |
|---|---|
| http://download.uci.de/idol2/idol2Client_2_12.exe | Broken Link |
| https://uci.de/download/idol2-client.html | Product Release Notes |
| https://uci.de/products/index.html | Product |
| https://www.syss.de/en/responsible-disclosure-policy | Not Applicable |
| https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-052.txt | Exploit Third Party Advisory |
Configurations
History
04 Sep 2025, 10:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.syss.de/en/responsible-disclosure-policy - Not Applicable | |
| References | () https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-052.txt - Exploit, Third Party Advisory |
03 Sep 2025, 19:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://download.uci.de/idol2/idol2Client_2_12.exe - Broken Link | |
| References | () https://uci.de/download/idol2-client.html - Product, Release Notes | |
| References | () https://uci.de/products/index.html - Product | |
| References | () https://www.syss.de/en/responsible-disclosure-policy - Product | |
| References | () https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-052.txt - Exploit, Vendor Advisory | |
| First Time |
Uci idol2
Uci |
|
| CPE | cpe:2.3:a:uci:idol2:*:*:*:*:*:*:*:* |
Information
Published : 2024-08-22 04:15
Updated : 2025-09-04 10:57
NVD link : CVE-2024-45169
Mitre link : CVE-2024-45169
CVE.ORG link : CVE-2024-45169
JSON object : View
Products Affected
uci
- idol2