Lucene search
PRIOn knowledge basePRION:CVE-2022-46330HistoryDec 21, 2022 - 9:15 a.m.
Design/Logic Flaw
2022-12-2109:15:00
PRIOn knowledge base
www.prio-n.com
1
dll search path
installation
update functionality
windows desktop applications
arbitrary code execution
user privilege
0.001 Low
EPSS
Percentile
26.7%
Squirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop applications. Installers generated by Squirrel.Windows 2.0.1 and earlier contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| squirrel.windows | le | 2.0.1 |
Related
jvn
jvn
cvelist
cvelist
CVE-2022-46330
2022-12-21 00:00:00
nvd
nvd
CVE-2022-46330
2022-12-21 09:15:08
cve
cve
CVE-2022-46330
2022-12-21 09:15:08
osv
osv
CVE-2022-46330
2022-12-21 09:15:08
veracode
veracode
Arbitrary Code Execution
2022-12-22 01:52:11