PT-2018-17473 · Sophos · Sophos Tester Tool
Published
2018-02-02
·
Updated
2018-02-15
·
CVE-2018-6318
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Sophos Tester Tool version 3.2.0.7 Beta
Description
The issue allows for a DLL Hijacking attack due to the lack of validation of a DLL loaded by the driver. This DLL is loaded from NTDLL.DLL in the context of the application, and an attacker can replace it with a malicious DLL of the same name, either locally or through a remote connection. When the product is used, the malicious DLL will be loaded.
Recommendations
For Sophos Tester Tool version 3.2.0.7 Beta, as a temporary workaround, consider restricting access to the DLL loading mechanism to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sophos Tester Tool