Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kmplayer | Kmplayer | 3.2.0.19 (including) | 3.2.0.19 (including) |
References
- http://osvdb.org/81558
- http://packetstormsecurity.org/files/112218/KMPlayer-3.2.0.19-DLL-Hijack.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75193
- http://osvdb.org/81558
- http://packetstormsecurity.org/files/112218/KMPlayer-3.2.0.19-DLL-Hijack.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75193