CVEvulnerability

CVE-2014-1680

6.9 MEDIUM Published 2014-02-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-02-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.

Affected configurations

• bandisoft bandizip (<= 3.09) • bandisoft bandizip 3.00 • bandisoft bandizip 3.01 • bandisoft bandizip 3.02 • bandisoft bandizip 3.03 • bandisoft bandizip 3.04 • bandisoft bandizip 3.05 • bandisoft bandizip 3.06 • bandisoft bandizip 3.07 • bandisoft bandizip 3.08

References