CVE-2022-25348

Опубликовано: 31 мар. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

Ссылки

https://hibara.org/software/attachecase/?lang=en
Product
Vendor Advisory
https://jvn.jp/en/jp/JVN10140834/index.html
Third Party Advisory
https://hibara.org/software/attachecase/?lang=en
Product
Vendor Advisory
https://jvn.jp/en/jp/JVN10140834/index.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:hibara:attachecase:*:*:*:*:*:*:*:*

Версия до 4.0.2.7 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.0008

Низкий

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-hmfr-96jf-xpg4