PT-2014-3715 · Hamster · Hamster Free Zip Archiver

Publicado 2014-10-23 · Atualizado 2017-08-29 · CVE-2014-0619

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hamster Free ZIP Archiver version 2.0.1.7

Description The issue allows local users to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll located in the current working directory.

Recommendations For Hamster Free ZIP Archiver version 2.0.1.7, consider removing or restricting access to the vulnerable dwmapi.dll file as a temporary workaround until a patch is available. Avoid using the affected version in environments where a Trojan horse dwmapi.dll could be introduced into the current working directory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2014-0619

Produtos afetados

Hamster Free Zip Archiver

Referências · 3

• 🔥 http://packetstormsecurity.com/files/128739/Hamster-Free-ZIP-Archiver-2.0.1.7-DLL-Hijacking.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97658 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0619 · Nota de Segurança