CVE-2018-16190
Summary
| CVE | CVE-2018-16190 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-02-13 18:29:00 UTC |
| Updated | 2019-02-21 17:34:00 UTC |
| Description | Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
Risk And Classification
Problem Types: CWE-426
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Micco | Lhmelting | All | All | All | All |
| Application | Micco | Lmlzh32.dll | All | All | All | All |
| Application | Micco | Unarj32.dll | All | All | All | All |
| Application | Micco | Unlha32.dll | All | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVN#52168232: UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL may insecurely load Dynamic Link Libraries | JVN | jvn.jp | Third Party Advisory |
| UNLHA32.DLLにおける任意のDLL読み込みに関する脆弱性 | MISC | micco.mars.jp | Patch, Vendor Advisory |
| UNARJ32.DLLにおける任意のDLL読み込みに関する脆弱性 | MISC | micco.mars.jp | Patch, Vendor Advisory |
| LMLzh32.DLLにおける任意のDLL読み込みに関する脆弱性 | MISC | micco.mars.jp | Patch, Vendor Advisory |
| LHMeltにおける任意のDLL読み込みに関する脆弱性 | MISC | micco.mars.jp | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.