| Title | VSO Software ConvertXtoDVD 7.0.0.83 DLL Hijacking |
|---|
| Description | # Title: VSO Software - ConvertXtoDVD - DLL Hijacking
# Author: Julio Aviña
# Vendor site: https://es.vso-software.fr/
# Download URL: https://es.vso-software.fr/download_product_direct.php?product=convertxtodvd
# Version: x.x.x.x
# Tested on: Windows 10 x64
A DLL hijacking vulnerability has been discovered in ConvertXtoDvd version 7.0.0.83.
Upon installing the application, when a user opens the ConvertXtoDvd.exe file, the application will load the following DLL from the same directory:
avcodec.dll
By using a crafted DLL, an attacker can execute arbitrary code in the context of the currently logged-in user. |
|---|
| User | Anonymous User |
|---|
| Submission | 10/09/2024 08:23 (2 years ago) |
|---|
| Moderation | 10/17/2024 18:13 (8 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 280758 [VSO ConvertXtoDvd 7.0.0.83 ConvertXtoDvd.exe uncontrolled search path] |
|---|
| Points | 17 |
|---|