Design/Logic Flaw

2022-03-3123:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

CPENameOperatorVersion
xlpdle7.0.0094

CPE	Name	Operator	Version
	xlpd	le	7.0.0094

References

github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xlpd-CreateProcessW-Misuse-Binary-Hijack

www.netsarang.com/en/xlpd-update-history/