CVE-2017-2246

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-2246 describes an untrusted search path vulnerability in the Installer of Lhaz version 2.4.0 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Risk Assessment

The organization may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.

Recommendation

It is recommended to update Lhaz to the latest version to mitigate this vulnerability and to monitor systems for potential attacks.

Other vulnerabilities in Lhaz Installer

CVE-2017-2248High
CVE-2017-2248 describes an untrusted search path vulnerability in the Installer of Lhaz+ version 3.4.0 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Original NVD description (English source)

Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.