PT-2017-12566 · Sandboxie · Sandboxie

Published 2017-08-06 · Updated 2017-08-14 · CVE-2017-12480

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sandboxie installer version 5071703

Description The issue concerns a DLL Hijacking or Unsafe DLL Loading vulnerability. This can be exploited via a Trojan horse dwmapi.dll or profapi.dll file placed in an AppDataLocalTemp directory.

Recommendations For version 5071703, consider removing or restricting access to the dwmapi.dll and profapi.dll files in the AppDataLocalTemp directory to minimize the risk of exploitation. As a temporary workaround, avoid using the Sandboxie installer until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2017-12480

Affected Products

Sandboxie

References · 4

• 🔥 https://medium.com/@BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41 · Exploit
• https://osv.dev/vulnerability/CVE-2017-12480 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12480 · Security Note
• https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41 · Note