CVE-2017-12414

Format Factory 4.1.0 is affected by a DLL hijacking vulnerability caused by untrusted search paths for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll. The Red Hat/CVEs and CNVD entries describe this as allowing a remote attacker to execute code by exploiting the hijack when the vulnerable softwar...