CVE-2018-16190

2019-02-1318:00:00

jpcert

www.cve.org

0.002 Low

EPSS

Percentile

58.5%

JSON

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CNA Affected

[
  {
    "product": "UNARJ32.DLL for Win32,  LHMelting for Win32, and  LMLzh32.DLL",
    "vendor": "Micco",
    "versions": [
      {
        "status": "affected",
        "version": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)"
      }
    ]
  }
]