EUVD-2017-2480

Malware in sbrugna...

Optimal Guard Installer Untrusted Search Path Vulnerability

Optimal Guard is an anti-malware solution from Optim Japan.Installer is one of the installers. An untrusted search path vulnerability exists in the installer in Optimal Guard 1.1.21 and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DL...

CVE-2017-10836

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10836

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10836

CVE-2017-10836 affects Optimal Guard (OPTiM) installers—versions 1.1.21 and earlier. The root cause is an untrusted/insecure DLL search path (CWE-427), allowing a Trojan horse DLL placed in a directory to be loaded and execute arbitrary code with the caller’s privileges. Documented impact: arbitr...

CVE-2017-10836

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Installer of Optimal Guard may insecurely load Dynamic Link Libraries

Overview Installer of Optimal Guard provided by OPTiM Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#87540575: Installer of Optimal Guard may insecurely load Dynamic Link Libraries

Installer of Optimal Guard provided by OPTiM Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer...