PT-2017-12543 · Free Time · Format Factory

Publicado 2017-08-03 · Atualizado 2017-08-09 · CVE-2017-12414

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Format Factory version 4.1.0

Description The issue arises from the use of an untrusted search path for certain DLL files, including msimg32.dll, WindowsCodecs.dll, and dwmapi.dll, which can lead to a DLL hijacking vulnerability.

Recommendations For Format Factory version 4.1.0, consider updating to a newer version that addresses this issue, if available. As a temporary workaround, restrict access to the vulnerable DLL files msimg32.dll, WindowsCodecs.dll, and dwmapi.dll to minimize the risk of exploitation.

Exploit

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-12414

Produtos afetados

Format Factory

Referências · 3

• 🔥 http://kth.ninja/2017/08/format-factory-dll-hijacking.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-12414 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12414 · Nota de Segurança