medium6.9
CVE-2014-1680
Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current w…
Impact
Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bandisoft | Bandizip | through 3.09 Versions 3.00, 3.01, 3.02, 3.03, 3.04 |
References
- NVD record
- CVE.org record
- http://osvdb.org/102979
- http://packetstormsecurity.com/files/125059
- http://www.bandisoft.com/bandizip/history
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90966
- http://osvdb.org/102979
- http://packetstormsecurity.com/files/125059
- http://www.bandisoft.com/bandizip/history
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90966