Description
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries (DLLs). When the installer is launched in a directory containing a specially crafted DLL file, the malicious DLL may be loaded, resulting in arbitrary code execution with administrative privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yamaha | Yamaha LAN Monitor for Windows | ≤ Ver.1.9.3 | — |