Trojan.Win32.DarkGateLoader urlmon.dll uncontrolled search path

Summaryinfo

A vulnerability classified as problematic has been found in Trojan.Win32.DarkGateLoader. Impacted is an unknown function in the library urlmon.dll. Performing a manipulation results in uncontrolled search path. Attacking locally is a requirement. Furthermore, an exploit is available.

Detailsinfo

A vulnerability classified as problematic has been found in Trojan.Win32.DarkGateLoader (version now known). This affects some unknown processing in the library urlmon.dll. The manipulation with an unknown input leads to a uncontrolled search path vulnerability. CWE is classifying the issue as CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. This is going to have an impact on confidentiality, integrity, and availability.

The advisory is shared at malvuln.com. The exploitability is told to be easy. An attack has to be approached locally. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1574 for this issue.

The exploit is shared for download at malvuln.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• Trojan.Win32.DarkGateLoader

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #350877: Trojan.Win32.DarkGateLoader (multi variants) Trojan.Win32.DarkGateLoader afe012ed0d96abfe869b9e26ea375824 Arbitrary Code Execution (by malvuln)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion