CVE-2017-11157
EUVD-2017-279230.08.2017, 20:29
Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| synology | cloud_station_backup | 𝑥 ≤ 4.2.4-4393 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration