CVE-2017-2248

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-2248 describes an untrusted search path vulnerability in the Installer of Lhaz+ version 3.4.0 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Risk Assessment

The organization may be exposed to unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to update to the latest version of Lhaz+ and monitor systems for potential malicious DLL files.

Other vulnerabilities in Lhaz+ Installer

CVE-2017-2246High
CVE-2017-2246 describes an untrusted search path vulnerability in the Installer of Lhaz version 2.4.0 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Original NVD description (English source)

Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.