CVE-2017-12414

Critical

Published: 03/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Format Factory version 4.1.0 has a DLL Hijacking vulnerability due to the use of an untrusted search path for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code in the context of the user, potentially leading to data loss or system compromise.

Recommendation

It is recommended to update Format Factory to the latest version and to verify DLL search paths to eliminate untrusted locations.

Original NVD description (English source)

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll.