Live › vulnerability › CVE-2024-4978
Go to dashboardThe JAVS Viewer installer ships a trojanized ffmpeg.exe (named fffmpeg.exe) that opens a backdoor connection to a malicious command-and-control server when run. An attacker who gets the installed binary onto a machine gets remote access to it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Justice AV Solutions Viewer | vendor | – | – |
| javs viewer | vendor | = 8.3.7.250 | – |
Search the machine for fffmpeg.exe with SHA256 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4
Apply the vendor mitigations or stop using JAVS Viewer, per the CISA required action
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2024-4978")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.