CVE-2014-1680

CVE-2014-1680 affects Bandizip (Bandisoft) prior to version 3.10. The vulnerability is a DLL hijacking/unsafe library loading issue where an attacker can place a dwmapi.dll in the current working directory, enabling local privilege escalation. The root cause is untrusted search path loading of an...

CVE-2014-1680

Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory...