CVE-2022-41796

2022-10-2400:00:00

jpcert

www.cve.org

untrusted search path

content transfer

privilege escalation

trojan horse dll

installer vulnerability

0.001 Low

EPSS

Percentile

29.9%

JSON

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CNA Affected

[
  {
    "vendor": "Sony Corporation",
    "product": "Content Transfer (for Windows)",
    "versions": [
      {
        "version": "Ver.1.3 and prior",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN40620121/index.html

www.sony.jp/support/audiosoftware/contenttransfer/

0.001 Low

EPSS

Percentile

29.9%

JSON

Related for CVELIST:CVE-2022-41796