CVE-2017-2247

CVE-2017-2247 concerns Lhaz self-extracting archive files created by Lhaz 2.4.0 and earlier. The vulnerability is an untrusted search path that can be exploited to gain privileges via a Trojan horse DLL located in an unspecified directory. Documents indicate that self-extracting archives and inst...

CVE-2017-2246

The CVE-2017-2246 entry concerns Lhaz Installer (version 2.4.0 and earlier). The vulnerability is an untrusted search path that allows an attacker to gain privileges by placing a Trojan DLL in an unspecified directory, enabling arbitrary code execution with the invoking user’s privileges via the ...