EUVD-2017-2475

Malware in sbrugna...

Design/Logic Flaw

Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Software" Ver1.8 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10831: Untrusted Search Path

Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Software" Ver1.8 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10831

The CVE concerns The CRCA user’s Software (the Ministry of Justice electronic authentication system). A vulnerability in the installer creates an untrusted DLL search path (CWE-427), allowing a remote attacker to execute arbitrary code with the privileges of the user invoking the installer. Affec...

PT-2017-11539

Name of the Vulnerable Software and Affected Versions The CRCA user's Software versions 1.8 and earlier Description The issue concerns an untrusted search path vulnerability in the electronic authentication system. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in...