Security Advisory

CVE-2018-10027

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-17 12:00:00

Last updated 2024-08-05 07:32:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Coders, %PROGRAMFILES(X86)%\ESTsoft\ALZip\Formats, or %PROGRAMFILES(X86)%\ESTsoft\ALZip\Coders.

← Browse all CVEs View on cve.org ↗