Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-22894 EUVD-2025-3039GHSA-rc3f-g789-3fg8

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker se…

Published Feb 6, 2025 · Updated Feb 12, 2025 · Assigned by jpcert

Description

Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.

Affected products

VendorProductAffectedFixed
Humming Heads Defense Platform Home Edition Ver.3.9.51.x and earlier —

References