CVE-2017-11158

CVE-2017-11158 affects Synology Cloud Station Drive on Windows (pre-4.2.5-4396). The issue is local DLL hijacking caused by untrusted search paths in the installer, enabling a local attacker to run arbitrary code by placing Trojan horses such as shfolder.dll, ntmarta.dll, secur32.dll, or dwmapi.d...