CVE-2017-2189

CVE-2017-2189 affects Sharp RW-4040 driver installer for Windows 7 (version 2.27). The issue is an insecure DLL search path (CWE-427) that may allow arbitrary code execution when a Trojan horse DLL is loaded during installation, granting the attacker the privilege level of the user running the in...

CVE-2017-2190

CVE-2017-2190 affects Sharp RW-4040: untrusted DLL search path in the Windows 7 version 1.2.0.0 tool can allow a Trojan horse DLL to run with the user’s privileges. Root cause is insecure DLL loading (CWE-427) in the DLL search path. Impact described as privilege escalation if a malicious DLL is ...