CVE-2017-2270
HighSummary
CVE-2017-2270 describes an untrusted search path vulnerability in encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 2.0.9 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
Organizations may be exposed to unauthorized access and privilege escalation, potentially leading to serious data security breaches.
Recommendation
It is recommended to update to the latest version of FileCapsule Deluxe Portable and to monitor and restrict access to directories where malicious DLL files may reside.
Other vulnerabilities in FileCapsule Deluxe Portable
See all- CVE-2017-2269High
The vulnerability in FileCapsule Deluxe Portable version 2.0.9 and earlier allows an attacker to gain privileges via a malicious DLL in an unspecified directory.
- CVE-2017-2268High
The vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable version 1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2267High
CVE-2017-2267 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.5.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2266High
CVE-2017-2266 describes an untrusted search path vulnerability in encrypted files in self-decrypting format created by FileCapsule Deluxe Portable version 1.0.4.1 and earlier. This allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2265High
CVE-2017-2265 describes an untrusted search path vulnerability in FileCapsule Deluxe Portable version 1.0.4.1 and earlier, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Original NVD description (English source)
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.