CVE-2018-16190

Опубликовано: 13 фев. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Ссылки

http://jvn.jp/en/jp/JVN52168232/index.html
Third Party Advisory
http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm
Patch
Vendor Advisory
http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm
Patch
Vendor Advisory
http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm
Patch
Vendor Advisory
https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm
Patch
Vendor Advisory
http://jvn.jp/en/jp/JVN52168232/index.html
Third Party Advisory
http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm
Patch
Vendor Advisory
http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm
Patch
Vendor Advisory
http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm
Patch
Vendor Advisory
https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:micco:lhmelting:*:*:*:*:*:*:*:*

Версия до 1.65.3.6 (включая)

cpe:2.3:a:micco:lmlzh32.dll:*:*:*:*:*:*:*:*

Версия до 2.67.1.2 (включая)

cpe:2.3:a:micco:unarj32.dll:*:*:*:*:*:*:*:*

Версия до 1.10.1.25 (включая)

cpe:2.3:a:micco:unlha32.dll:*:*:*:*:*:*:*:*

Версия до 2.67.1.2 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x86:*

EPSS

Процентиль: 51%

0.00282

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-mghc-2hpg-x6vf