10 matches found
EUVD-2017-11471
Malware in sbrugna...
Design/Logic Flaw
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2288
CVE-2017-2288 refers to an untrusted DLL search path in LhaForge versions up to 1.6.5, caused by insecure DLL loading during installer execution. The underlying issue (CWE-427) allows arbitrary code execution with the invoking user’s privileges when the installer runs. Affected product: LhaForge ...
CVE-2017-2288: Uncontrolled Search Path Element
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
PT-2017-15328
Name of the Vulnerable Software and Affected Versions LhaForge versions 1.6.5 and earlier Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability. Recommendations For versions 1.6.5 and earlier, a...
Installer of LhaForge may insecurely load Dynamic Link Libraries
Overview LhaForge is a file compression/decompression software. The installer of LhaForge contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with t...
JVN#74554973: Installer of LhaForge may insecurely load Dynamic Link Libraries
LhaForge is a file compression/decompression software. The installer of LhaForge contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution U...