CVE-2018-0619

Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities (Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2018-07-26

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Glary Utilities (Glarysoft)
• Installer Of Glary Utilities (Glarysoft Ltd.)

References

• http://jvn.jp/en/jp/JVN84967039/index.html