Unscored CVE-2017-2248 EUVD-2017-11431GHSA-w8p7-2g6r-qm7w

Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan hors…

Published Jul 14, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Chitora soft Product: Installer of Lhaz+

Description

Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
Chitora soft	Installer of Lhaz+	version 3.4.0 and earlier	—

References

JVN#21369452 third-party-advisory
http://chitora.com/jvn21369452.html