CVE-2017-2271

CVE-2017-2271 concerns an untrusted search path vulnerability in AttacheCase, affecting self-extracting encrypted files created by AttacheCase versions 2.8.3.0 and earlier. The root cause is insecure loading of Dynamic Link Libraries (DLLs) via a Trojan horse DLL in an unspecified directory, enab...

JVN#61502349: Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries

AttacheCase is an open source file encryption software provided by HiBARA Software. It can also create self-extracting encrypted files. Self-extracting encrypted files created by AttacheCase contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...