Vit · Vit Spider Player · CVE-2017-11748
**Name of the Vulnerable Software and Affected Versions**
VIT Spider Player version 2.5.3
**Description**
The issue allows for DLL hijacking via a Trojan horse file, specifically targeting `dwmapi.dll`, `olepro32.dll`, `dsound.dll`, or `AUDIOSES.dll`. This can occur due to an untrusted search path.
**Recommendations**
For VIT Spider Player version 2.5.3, consider restricting access to the mentioned DLL files until a patch is available. As a temporary workaround, avoid using the application in environments where untrusted files may be present. At the moment, there is no information about a newer version that contains a fix for this issue.