Unscored CVE-2017-2247 EUVD-2017-11430GHSA-59vx-x945-qj3r

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain p…

Published Jul 14, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Chitora soft Product: Self-extracting archive files created by Lhaz

Description

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
Chitora soft	Self-extracting archive files created by Lhaz	version 2.4.0 and earlier	—

References

JVN#21369452 third-party-advisory
http://chitora.com/jvn21369452.html