Skip to content
OpenAdvisories
High · 7.2 CVE-2019-19161 EUVD-2019-8793GHSA-v5hj-j267-vhm7

To be able to change Dll Files to preload with missing support for integrity check vulnerability MIPLATFORM ActiveX of TOBESOFT.CO.LTD,

Published Jun 30, 2020 · Updated Aug 5, 2024 · Assigned by krcert

Description

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.

Affected products

VendorProductAffectedFixed
TOBESOFT.CO.LTD MIPLATFORM unspecified – ≤ 2016.5.26.1 —

References