JVN#79301396: Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries

Susie plug-in “axpdfium” contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).

Impact

Arbitrary code may be executed with the privilege of the user running the program where “axpdfium” is used.

Solution

Update the plug-in
Update the plug-in according to the information provided by the developer.

Products Affected

• axpdfium v0.01