deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-13823
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "QuickTime" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13824
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Open Scripting Architecture" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted AppleScript file that is mishandled by osadecompile.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13825
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13826
Published: 2017-11-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-10140.  Reason: This candidate is a reservation duplicate of CVE-2017-10140.  Notes: All CVE users should reference CVE-2017-10140 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-13828
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Fonts" component. It allows remote attackers to spoof the user interface via crafted text.
CVSS Score: 5.5 (MEDIUM)
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13829
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT208221; https://support.apple.com/HT208221
CVE: CVE-2017-13830
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13831
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service via a crafted image.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13832
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "802.1X" component. It allows attackers to have an unspecified impact by leveraging TLS 1.0 support.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13833
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13834
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted mach binary.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13836
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13838
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13840
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13841
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13842
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13843
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13844
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Messages" component. It allows physically proximate attackers to view arbitrary photos via a Reply With Message action in the lock-screen state.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102099; http://www.securitytracker.com/id/1039703; https://support.apple.com/HT208222
CVE: CVE-2017-13846
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "PCRE" product. Versions before 8.40 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-13849
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (application crash) via a crafted text file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/101691; http://www.securitytracker.com/id/1039703; https://support.apple.com/HT208219
CVE: CVE-2017-13852
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to monitor arbitrary apps via a crafted app that accesses process information at a high rate.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.apple.com/HT208219; https://support.apple.com/HT208220; https://support.apple.com/HT208221
CVE: CVE-2017-7113
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1039703; https://support.apple.com/HT208222; http://www.securitytracker.com/id/1039703
CVE: CVE-2017-7132
Published: 2017-11-13
Description: An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted Office document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-400
References: http://www.securitytracker.com/id/1039710; https://support.apple.com/HT208221; http://www.securitytracker.com/id/1039710
CVE: CVE-2017-0908
Published: 2017-11-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2017-16510.  Reason: This candidate is a reservation duplicate of CVE-2017-16510.  Notes: All CVE users should reference CVE-2017-16510 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-11169
Published: 2017-11-13
Description: Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by leveraging a guest/user/normal account to submit a modified privilege parameter to /form2userconfig.cgi.
CVSS Score: 8.8 (HIGH)
References: http://www.uniquish.tech/2017/11/privelege-escalation-in-iball-ib.html; http://www.uniquish.tech/2017/11/privelege-escalation-in-iball-ib.html
CVE: CVE-2017-14711
Published: 2017-11-13
Description: The Kickbase GmbH "Kickbase Bundesliga Manager" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to a credentials leak due to transmitting a username and password in cleartext from client to server during registration and authentication.
CVSS Score: 8.1 (HIGH)
CWE: CWE-522
References: https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic; https://www.crissyfield.de/2017/11/09/sniffing-kickbase-traffic
CVE: CVE-2017-16792
Published: 2017-11-13
Description: Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md; https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7; https://rubygems.org/gems/geminabox/versions/0.13.10
CVE: CVE-2017-16801
Published: 2017-11-13
Description: Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbitrary web script or HTML via the Step Template Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/OctopusDeploy/Issues/issues/3915; https://github.com/OctopusDeploy/Issues/issues/3915
CVE: CVE-2017-8806
Published: 2017-11-13
Description: The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 for PostgreSQL (and other packages related to Debian and Ubuntu), handled symbolic links insecurely, which could result in local denial of service by overwriting arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://metadata.ftp-master.debian.org/changelogs/main/p/postgresql-common/postgresql-common_181+deb9u1_changelog; http://www.securityfocus.com/bid/101810; https://usn.ubuntu.com/usn/usn-3476-1/
CVE: CVE-2016-6803
Published: 2017-11-13
Description: An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application (or user) running with administrative privilege. Any installer with the unquoted search path vulnerability becomes a delayed trigger for the exploit.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/94418; http://www.securitytracker.com/id/1037015; https://www.openoffice.org/security/cves/CVE-2016-6803.html
CVE: CVE-2017-10871
Published: 2017-11-13
Description: Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN23367475/index.html; http://jvn.jp/en/jp/JVN23367475/index.html
CVE: CVE-2017-10875
Published: 2017-11-13
Description: I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN87886530/index.html; http://www.iodata.jp/support/information/2017/ld-connect/; http://jvn.jp/en/jp/JVN87886530/index.html
CVE: CVE-2017-10885
Published: 2017-11-13
Description: Untrusted search path vulnerability in HYPER SBI Ver. 2.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN71284826/index.html; http://jvn.jp/en/jp/JVN71284826/index.html
CVE: CVE-2017-3166
Published: 2017-11-13
Description: In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization mechanism, that file will be stored in a world-readable location and can be shared freely with any application that requests to localize that file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://lists.apache.org/thread.html/2e16689b44bdd1976b6368c143a4017fc7159d1f2d02a5d54fe9310f%40%3Cgeneral.hadoop.apache.org%3E; https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/2e16689b44bdd1976b6368c143a4017fc7159d1f2d02a5d54fe9310f%40%3Cgeneral.hadoop.apache.org%3E
CVE: CVE-2017-7739
Published: 2017-11-13
Description: A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously crafted URL to the victim.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/101679; http://www.securitytracker.com/id/1039741; https://fortiguard.com/advisory/FG-IR-17-168
CVE: CVE-2012-2456
Published: 2017-11-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2011-5174.  Reason: This candidate is a reservation duplicate of CVE-2011-5174.  Notes: All CVE users should reference CVE-2011-5174 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-8234
Published: 2017-11-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2017-16802
Published: 2017-11-13
Description: In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194; https://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194
CVE: CVE-2017-3767
Published: 2017-11-13
Description: A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.lenovo.com/us/en/product_security/LEN-15759; https://support.lenovo.com/us/en/product_security/LEN-15759
CVE: CVE-2017-9314
Published: 2017-11-13
Description: Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html; http://www.dahuasecurity.com/annoucementsingle/security-advisory--authentication-vulnerability-found-in-some-dahua-nvr_14731_211.html
CVE: CVE-2017-0889
Published: 2017-11-13
Description: Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://github.com/thoughtbot/paperclip/pull/2435; https://hackerone.com/reports/209430; https://hackerone.com/reports/713
CVE: CVE-2017-0904
Published: 2017-11-13
Description: The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, such as when used to blacklist private network addresses to prevent server-side request forgery.
CVSS Score: 8.1 (HIGH)
CWE: CWE-242, CWE-755
References: https://edoverflow.com/2017/ruby-resolv-bug/; https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c[PII_REDACTED]a5b33ad82b46af; https://github.com/jtdowney/private_address_check/issues/1
CVE: CVE-2017-0905
Published: 2017-11-13
Description: The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource#find" method that could result in compromise of API keys or other critical resources.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://dev.recurly.com/page/ruby-updates; https://github.com/recurly/recurly-client-ruby/commit/1bb0284d6e668b8b3d31167790ed6db1f6ccc4be; https://hackerone.com/reports/288635
CVE: CVE-2017-0906
Published: 2017-11-13
Description: The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://dev.recurly.com/page/python-updates; https://github.com/recurly/recurly-client-python/commit/049c74699ce93cf126feff06d632ea63fba36742; https://hackerone.com/reports/288635
CVE: CVE-2017-0907
Published: 2017-11-13
Description: The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://dev.recurly.com/page/net-updates; https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1; https://hackerone.com/reports/288635
CVE: CVE-2017-14388
Published: 2017-11-13
Description: Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the grootfs volume cache. For example, this could allow an attacker to provide an image layer that GrootFS would consider to be the Ubuntu base layer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.cloudfoundry.org/cve-2017-14388/; https://www.cloudfoundry.org/cve-2017-14388/
CVE: CVE-2017-16803
Published: 2017-11-13
Description: In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101882; https://bugzilla.libav.org/show_bug.cgi?id=1098; https://github.com/libav/libav/commit/cd4663dc80323ba64989d0c103d51ad3ee0e9c2f
CVE: CVE-2017-14020
Published: 2017-11-13
Description: In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer Software (Part Number DM-PGMSW) Versions 2.0.3 and prior; GS Drives Configuration Software (Part Number GSOFT) Versions 4.0.6 and prior; SL-SOFT SOLO Temperature Controller Configuration Software (Part Number SL-SOFT) Versions 1.1.0.5 and prior; and DirectSOFT Programming Software Versions 6.1 and prior, an uncontrolled search path element (DLL Hijacking) vulnerability has been identified. To exploit this vulnerability, an attacker could rename a malicious DLL to meet the criteria of the application, and the application would not verify that the DLL is correct. Once loaded by the application, the DLL could run malicious code at the privilege level of the application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://www.securityfocus.com/bid/101780; https://ics-cert.us-cert.gov/advisories/ICSA-17-313-01; http://www.securityfocus.com/bid/101780