CVE-2022-25348

CVE-2022-25348 concerns AttacheCase (HiBARA) where an untrusted DLL search path allows a Trojan horse DLL to be loaded, enabling local privilege escalation and arbitrary code execution. Affected versions are AttacheCase 4.0.2.7 and earlier. The vulnerability stems from insecure DLL loading and se...

CVE-2022-28128

CVE-2022-28128 affects AttacheCase (HiBARA) up to version 3.6.1.0. The vulnerability arises from untrusted DLL search path handling, enabling a local attacker to load a Trojan horse DLL and gain privileges or execute arbitrary code. Exploitation is described as a local issue with potential for ar...

CVE-2017-2271

CVE-2017-2271 concerns an untrusted search path vulnerability in AttacheCase, affecting self-extracting encrypted files created by AttacheCase versions 2.8.3.0 and earlier. The root cause is insecure loading of Dynamic Link Libraries (DLLs) via a Trojan horse DLL in an unspecified directory, enab...

CVE-2018-0659

AttacheCase (open source file encryption software) has a directory traversal vulnerability CVE-2018-0659 due to how it processes filenames in ATC files. Affected versions are 2.8.4.0 and earlier and 3.3.0.0 and earlier. Exploitation via a crafted ATC file can create or overwrite arbitrary files d...

CVE-2017-2272

AttacheCase self-extracting encrypted files are affected by an untrusted DLL search path (CWE-427) vulnerability. Versions up to 3.2.2.6 are vulnerable; exploitation allows arbitrary code execution via a Trojan DLL loaded from an untrusted directory. Affected products include AttacheCase with CVE...

CVE-2016-7842

AttacheCase contains a directory traversal vulnerability (CWE-22) that allows reading arbitrary files via crafted ATC files. Affected products: AttacheCase ver. 2.8.2.8 and earlier, and ver. 3.2.0.4 and earlier. Root cause: flaw in processing filenames in ATC files. Impact reported in sources inc...

CVE-2018-0674

CVE-2018-0674 affects AttacheCase, a file‑encryption tool by HiBARA Software. Vulnerability: when a specially crafted AtcCase.ini is in the same folder as the ATC file, decryption can trigger execution of an arbitrary script, enabling a remote unauthenticated attacker to run code. Affected: Attac...

CVE-2018-0660

CVE-2018-0660 is a directory traversal vulnerability in AttacheCase. It affects versions 2.8.4.0 and earlier and 3.3.0.0 and earlier, allowing an attacker to create arbitrary files via a specially crafted ATC file due to a flaw in processing filenames in ATC files. The issue can lead to creation ...

CVE-2018-0675

CVE-2018-0675 affects AttacheCase up to version 3.3.0.0 (and earlier). The vulnerability allows arbitrary script execution via crafted settings, specifically when a malicious ATCCase.ini is placed in the same folder as the ATC file and the file is decrypted. The root cause is tied to handling of ...