Research · May 22, 2024 · ZeroDay Catalog
Malicious Code Vulnerability Identified in JAVS Viewer Installer
A vulnerability has been discovered in the JAVS Viewer Installer, which contains embedded malicious code that could compromise system integrity.
What changed
A significant vulnerability has been identified in the Justice AV Solutions (JAVS) Viewer Installer, specifically version 8.3.7.250-1. This installer contains a malicious binary that executes upon installation, posing a serious risk to users.
The embedded code is signed with an unexpected authenticode signature, raising concerns about the integrity and authenticity of the software.
Who is affected
Organizations utilizing the JAVS Viewer software are at risk due to this vulnerability. The following groups are particularly affected:
IT departments and security teams responsible for maintaining software integrity in their environments.
- Justice AV Solutions (JAVS) Viewer users, especially those on version 8.3.7.250-1.
- Organizations in sectors relying on video and audio recording solutions.
- Any entity that integrates JAVS products into their operational workflows.
What to do
Immediate action is required to mitigate the risks associated with this vulnerability. Users should refrain from installing the affected version of the JAVS Viewer until further notice.
It is advisable to monitor official channels for updates and patches from JAVS to address this issue.
- Review and audit current installations of JAVS Viewer to identify any affected versions.
- Implement security measures to prevent the execution of unauthorized binaries.
- Stay informed about updates from JAVS regarding remediation steps.