CVE-2014-1680

Description

Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/90966

http://www.bandisoft.com/bandizip/history

http://osvdb.org/102979

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS