CVE

Id
88100  
CVE No.
CVE-2016-1281  
Status
Candidate  
Description
Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application directory", as demonstrated with the USP10.dll, RichEd20.dll, NTMarta.dll and SRClient.dll DLLs.  
Phase
Assigned (20160102)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
766132 88100 CVE-2016-1281 FULLDISC:20160108 Executable installers are vulnerable^WEVIL (case 20): TrueCrypt"s installers allow arbitrary (remote) code execution and escalation of privilege  View
766133 88100 CVE-2016-1281 URL:http://seclists.org/fulldisclosure/2016/Jan/22  View
766134 88100 CVE-2016-1281 MLIST:[oss-security] 20160111 CVE-2016-1281: TrueCrypt and VeraCrypt Windows installers allow arbitrary code execution with elevation of privilege  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1613 JVNDB-2016-002386 Micro Focus Novell Service Desk における任意の添付ファイルを読まれる脆弱性 Micro Focus Novell Service Desk には、任意の添付ファイルを読まれる脆弱性が存在します。 CVE-2016-1594 88100 4 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002386.html  View