CVE-2014-0619

Untrusted search path vulnerability in Hamster Free ZIP Archiver 2.0.1.7 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the current working directory.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cve@mitre.org

Published

2014-10-23

Last modified

2024-08-06

Affected products

• Hamster Free Zip Archiver (Hamstersoft)

References

• http://packetstormsecurity.com/files/128739/Hamster-Free-ZIP-Archiver-2.0.1.7-DLL-Hijacking.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97658