High · 7.8 CVE-2022-41796 EUVD-2022-44964GHSA-3fx6-2v2x-qmr9

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privile…

Published Oct 24, 2022 · Updated May 7, 2025 · Assigned by jpcert

Vendor: Sony Product: Content Transfer (for Windows) Platform: Windows

Description

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
Sony	Content Transfer (for Windows)	Ver.1.3 and prior	—

References

https://www.sony.jp/support/audiosoftware/contenttransfer/
https://jvn.jp/en/jp/JVN40620121/index.html