CVE-2017-2268
HighSummary
The vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
The organization may be exposed to unauthorized access to systems and data, potentially leading to serious security consequences.
Recommendation
It is recommended to update to the latest version of FileCapsule Deluxe Portable and to monitor and secure directories where malicious DLL files may reside.
Other vulnerabilities in FileCapsule Deluxe Portable
See all- CVE-2017-2270High
CVE-2017-2270 describes an untrusted search path vulnerability in encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 2.0.9 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2269High
The vulnerability in FileCapsule Deluxe Portable version 2.0.9 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
- CVE-2017-2267High
CVE-2017-2267 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.5.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2266High
CVE-2017-2266 describes an untrusted search path vulnerability in encrypted files in self-decrypting format created by FileCapsule Deluxe Portable version 1.0.4.1 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2265High
CVE-2017-2265 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.4.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Original NVD description (English source)
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.