CVE-2017-14010

Summary

In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system.

Impact & exploitability

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://spidercontrol.net/download/downloadarea/?lang=en ↗

Additional information

• NVD record
• http://spidercontrol.net/download/downloadarea/?lang=enPatch
• https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01Patch
• http://www.securityfocus.com/bid/101505Advisory