Overview
- Description
- Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Source
- vultures@jpcert.or.jp
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-426
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:micco:lhmelting:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93DE5C2D-86DA-47AA-8B48-B6491A837C94",
"versionEndIncluding": "1.65.3.6"
},
{
"criteria": "cpe:2.3:a:micco:lmlzh32.dll:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B6C1772-34C1-4359-922B-AD3CD5851CB5",
"versionEndIncluding": "2.67.1.2"
},
{
"criteria": "cpe:2.3:a:micco:unarj32.dll:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EFBC7F4-7258-4A75-9766-31A7891D3078",
"versionEndIncluding": "1.10.1.25"
},
{
"criteria": "cpe:2.3:a:micco:unlha32.dll:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39B766F3-F7DF-49EE-A97A-FC31DAC04AFC",
"versionEndIncluding": "2.67.1.2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x86:*",
"vulnerable": false,
"matchCriteriaId": "60366048-32FE-4081-A852-04319FD7A52C"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]