CVE-2017-11159CWE-427

Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute…

published August 23, 2017

CVSS
—
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00449 · 38.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2017-08-23T15:00Z
EPSS history
Timeline
  • 23 AUG 15:00Z
    Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute…
    cvelistv5