CVE-2017-2206

CVE-2017-2206 affects SaAT Netizen installer prior to ver.1.2.10.510. The issue is an insecure DLL search path (CWE-427) in the installer, enabling arbitrary code execution with the invoking user’s privileges via a Trojan horse DLL in an unspecified directory. Affected component: installer’s DLL ...