CVE-2017-2108

CVE-2017-2108 affects PrimeDrive Desktop Application (1.4.3 and earlier). The vulnerability is an untrusted search path/DLL hijacking in the installer, allowing arbitrary code execution with the privileges of the user during installation via a Trojan horse DLL located in an unspecified directory ...

CVE-2017-2167

The CVE-2017-2167 issue affects PrimeDrive Desktop Application Installer (PrimeDrive Desktop Application) prior to version 1.4.5, where the installer insecurely loads executable files from the file search path (CWE-427). The root cause is an unsecure search path that may cause an attacker to have...