CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Untrusted Search Path
Summary: nomachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the dll are in the current working directory, and the trojan horse code is executed. (the directory could, in general, be on a local filesystem or a network share.).
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-10-15
Last Modified Date: 2019-01-22