CVE-2017-5235

High

Published: 02/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, allowing a malicious DLL located in the current working directory of the installer to be loaded.

Risk Assessment

This vulnerability could lead to the execution of malicious code on the system, posing a significant security risk to the organization.

Recommendation

It is recommended to upgrade to version 4.13.0-2017022101 or later to mitigate this vulnerability.

Other vulnerabilities in Rapid7 Metasploit Pro

CVE-2026-7373High
Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. An attacker can exploit an OpenSSL configuration file to trick the high-privilege service into executing arbitrary commands.

Original NVD description (English source)

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.