CVE-2022-25348

CVE-2022-25348 concerns AttacheCase (HiBARA) where an untrusted DLL search path allows a Trojan horse DLL to be loaded, enabling local privilege escalation and arbitrary code execution. Affected versions are AttacheCase 4.0.2.7 and earlier. The vulnerability stems from insecure DLL loading and se...

CVE-2022-25348

Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

PT-2022-17229 · Unknown · Attachecase

Name of the Vulnerable Software and Affected Versions: AttacheCase versions 4.0.2.7 and earlier Description: The issue allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability...

PT-2022-18828 · Unknown · Attachecase

Name of the Vulnerable Software and Affected Versions: AttacheCase versions 3.6.1.0 and earlier Description: The issue allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability...

AttacheCase may insecurely load Dynamic Link Libraries

Overview AttacheCase may insecurely load Dynamic Link Libraries. AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Taizoh Tsukamoto of...

JVN#10140834: AttacheCase may insecurely load Dynamic Link Libraries

AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege to run the software. Solution...

HiBARA Software AttacheCase 代码问题漏洞

HiBARA Software AttacheCase is a powerful file/folder encryption software from the Japanese individual developer Hibara Mitsuhiro. A code issue vulnerability exists in HiBARA Software AttacheCase version 3.6.1.0, which arises from an application loading DLL libraries in an insecure manner. A remo...

HiBARA Software AttacheCase 代码问题漏洞

HiBARA Software AttacheCase is a powerful file/folder encryption software from the Japanese individual developer Hibara Mitsuhiro. A code issue vulnerability exists in HiBARA Software AttacheCase version 4.0.2.7, which arises from loading DLL libraries in an insecure manner. A remote attacker can...

AttacheCase Directory Traversal Vulnerability (CNVD-2019-17162)

AttacheCase is an open source file encryption software. A directory traversal vulnerability exists in AttacheCase versions 2.8.4.0 and earlier and 3.3.0.0 and earlier, which can be exploited to create arbitrary files with the help of a specially crafted ATC file...

AttacheCase Directory Traversal Vulnerability (CNVD-2019-17161)

AttacheCase is an open source file encryption software. A directory traversal vulnerability exists in AttacheCase versions 2.8.4.0 and earlier and 3.3.0.0 and earlier, which can be exploited to create or overwrite existing files with the help of a specially crafted ATC file...

CVE-2018-0675

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0675

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

Design/Logic Flaw

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

Design/Logic Flaw

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0675

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors...

CVE-2018-0674

CVE-2018-0674 affects AttacheCase, a file‑encryption tool by HiBARA Software. Vulnerability: when a specially crafted AtcCase.ini is in the same folder as the ATC file, decryption can trigger execution of an arbitrary script, enabling a remote unauthenticated attacker to run code. Affected: Attac...

CVE-2018-0675

CVE-2018-0675 affects AttacheCase up to version 3.3.0.0 (and earlier). The vulnerability allows arbitrary script execution via crafted settings, specifically when a malicious ATCCase.ini is placed in the same folder as the ATC file and the file is decrypted. The root cause is tied to handling of ...