Design/Logic Flaw

Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10849

CVE-2017-10849 affects DocuWorks self-extracting documents generated by DocuWorks 8.0.7 and earlier. The underlying issue is an untrusted DLL search path that can allow a Trojan horse DLL placed in an unspecified directory to be loaded, enabling privilege escalation. The vulnerability is tied to ...