Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Link | Tags |
---|---|
https://jvn.jp/en/jp/JVN87403477/index.html | third party advisory vdb entry |
http://flets-w.com/topics/2018/20180207a.html | vendor advisory |