PT-2014-3715 · Hamster · Hamster Free Zip Archiver

Published 2014-10-23 · Updated 2017-08-29 · CVE-2014-0619

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hamster Free ZIP Archiver version 2.0.1.7

Description The issue allows local users to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll located in the current working directory.

Recommendations For Hamster Free ZIP Archiver version 2.0.1.7, consider removing or restricting access to the vulnerable dwmapi.dll file as a temporary workaround until a patch is available. Avoid using the affected version in environments where a Trojan horse dwmapi.dll could be introduced into the current working directory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2014-0619

Affected Products

Hamster Free Zip Archiver

References · 3

• 🔥 http://packetstormsecurity.com/files/128739/Hamster-Free-ZIP-Archiver-2.0.1.7-DLL-Hijacking.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-0619 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97658 · Note