CVE-2017-12266

Cisco Meeting App for Windows is affected by an elevation-of-privilege flaw in the DLL-loading path validation. The issue stems from incomplete input validation of DLL file paths before loading, allowing a local, authenticated user to place a crafted DLL in a system directory and execute commands...