CVE-2017-2265
HighSummary
CVE-2017-2265 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.4.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
The organization may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.
Recommendation
It is recommended to update FileCapsule Deluxe Portable to the latest version and to monitor and restrict access to directories where malicious files may reside.
Other vulnerabilities in FileCapsule Deluxe Portable
See all- CVE-2017-2270High
CVE-2017-2270 describes an untrusted search path vulnerability in encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 2.0.9 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2269High
The vulnerability in FileCapsule Deluxe Portable version 2.0.9 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
- CVE-2017-2268High
The vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2267High
CVE-2017-2267 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.5.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2266High
CVE-2017-2266 describes an untrusted search path vulnerability in encrypted files in self-decrypting format created by FileCapsule Deluxe Portable version 1.0.4.1 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Original NVD description (English source)
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.