CVE-2021-38469 — AUVESY Versiondog
Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting the…
Published: 2021-10-22 · CVSS: 9.1 · CVSS 3.1
Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7