CVE-2017-11748 VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file.
HighCVSS 7.8
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softonic spider player | = 2.5.3 | No fix listed |
References
- blog.pentest.space exploit mitigation third-party-advisory