JVicente928307 (Community Member) asked a question.

January 12, 2024 at 10:37 AM
CWE ID 506 In module syncfusion.shared.base.dll

Hello

CWE-506: Embedded Malicious Code.

In module syncfusion.shared.base.dll at locations:

void AddCallWndProcListener(ICallWndProcListener) /// Syncfusion.Windows.Forms.Tools.Design.ThreadHooks

void AddGetMsgProcListener(IGetMsgProcListener) /// Syncfusion.Windows.Forms.Tools.Design.ThreadHooks

void HookMessage() /// Syncfusion.Windows.Forms.MouseProcHookerUtil

void HookMessage() /// Syncfusion.Windows.Forms.KeyboardProcHooker

 

Thanks!

  • 2 answers
  • 286 views

  • JVicente928307 (Community Member)

    Flaws shows up in a static scan.

    The syncfusion.shared.base.dll module needs to be scanned.

    So, what can we do? 

    Is it a false positive or can it be mitigated?

     

    • Boy, Security Consultant (Veracode)

      Hi,

       

      Veracode Static Analysis detects using of very dangerous functionality as the potential for 'embedded malicious code'.

      We strongly recommend you work with the code authors to determine why this functionality is in place. 'Hooking into' all mouse and keyboard interactions is very powerful and dangerous functionality that may have legitimate usage but should be carefully auditted.

       

      I would recommend you schedule a consultation call to discuss.

      You can check out this knowledge article (https://community.veracode.com/s/article/How-to-schedule-a-consultation-call) on how to schedule a consultation call with us.

       

      Thank you,

      Boy Baukema

      Expand Post

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.