medium4.4Public exploit code
CVE-2014-9416
Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijackin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Huawei eSpace 1.1.11.103 - DLL Hijacking2019-05-20 · local · windows
Impact
Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) mfc71enu.dll, (2) mfc71loc.dll, (3) tcapi.dll, or (4) airpcap.dll.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Espace Desktop | through v200r003c00 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/152966/Huawei-eSpace-1.1.11.103-DLL-Hijacking.html
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm
- http://packetstormsecurity.com/files/152966/Huawei-eSpace-1.1.11.103-DLL-Hijacking.html
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-406589.htm