CVE-2017-2266
HighSummary
CVE-2017-2266 describes an untrusted search path vulnerability in encrypted files in self-decrypting format created by FileCapsule Deluxe Portable version 1.0.4.1 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
The organization may be exposed to attacks that exploit this vulnerability to gain unauthorized access to systems and data. Malware could be introduced into the environment, leading to potential financial and reputational losses.
Recommendation
It is recommended to update FileCapsule Deluxe Portable to the latest version to mitigate this vulnerability. Additionally, monitoring and restricting access to directories where malicious DLL files may be stored is advised.
Other vulnerabilities in FileCapsule Deluxe Portable
See all- CVE-2017-2270High
CVE-2017-2270 describes an untrusted search path vulnerability in encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 2.0.9 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2269High
The vulnerability in FileCapsule Deluxe Portable version 2.0.9 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
- CVE-2017-2268High
The vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2267High
CVE-2017-2267 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.5.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2265High
CVE-2017-2265 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.4.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Original NVD description (English source)
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.