Description
The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SBI SECURITIES | HYPER SBI 2 | < ver.3.20.0 | ver.3.20.0 |