CVE-2018-0620

Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0620

CVE-2018-0620 affects LOGICOOL Game Software versions before 8.87.116 due to an untrusted DLL search path vulnerability (CWE-427). The root cause is insecure loading of a Trojan horse DLL, enabling privilege escalation when the vulnerable installer is used. Official remediation per JVN/JVNDB note...

JVN#52574492: The installers of multiple Logicool software programs may insecurely load Dynamic Link Libraries

The installers of multiple software programs provided by Logicool Co. Ltd contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries（CWE-427）. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the...