Description
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe.
References
- 20160315 Defense in depth -- the Microsoft way (part 39): vulnerabilities, please meet the bar for security servicing mailing-list
- https://www.f-secure.com/en/web/labs_global/fsc-2015-4
- 79657 vdb-entry
- 20160317 Defense in depth -- the Microsoft way (part 39): vulnerabilities, please meet the bar for security servicing mailing-list