PT-2017-12566 · Sandboxie · Sandboxie

Publicado 2017-08-06 · Atualizado 2017-08-14 · CVE-2017-12480

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sandboxie installer version 5071703

Description The issue concerns a DLL Hijacking or Unsafe DLL Loading vulnerability. This can be exploited via a Trojan horse dwmapi.dll or profapi.dll file placed in an AppDataLocalTemp directory.

Recommendations For version 5071703, consider removing or restricting access to the dwmapi.dll and profapi.dll files in the AppDataLocalTemp directory to minimize the risk of exploitation. As a temporary workaround, avoid using the Sandboxie installer until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-12480

Produtos afetados

Sandboxie

Referências · 4

• 🔥 https://medium.com/@BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41 · Exploit
• https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41 · Nota
• https://osv.dev/vulnerability/CVE-2017-12480 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12480 · Nota de Segurança