CVE

Id
90777  
CVE No.
CVE-2016-3958  
Status
Candidate  
Description
Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function.  
Phase
Assigned (20160405)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
781655 90777 CVE-2016-3958 MLIST:[golang-announce] 20160412 [security] Go 1.6.1 and 1.5.4 are released  View
781656 90777 CVE-2016-3958 URL:https://groups.google.com/forum/#!topic/golang-announce/9eqIHqaWvck  View
781657 90777 CVE-2016-3958 MLIST:[oss-security] 20160405 CVE request - Go - DLL loading, Big int  View
781658 90777 CVE-2016-3958 URL:http://www.openwall.com/lists/oss-security/2016/04/05/1  View
781659 90777 CVE-2016-3958 MLIST:[oss-security] 20160405 Re: CVE request - Go - DLL loading, Big int  View
781660 90777 CVE-2016-3958 URL:http://www.openwall.com/lists/oss-security/2016/04/05/2  View
781661 90777 CVE-2016-3958 CONFIRM:https://github.com/golang/go/issues/14959  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3959 JVNDB-2016-004732 Adobe Flash Player におけるアクセス制限を回避される脆弱性 Adobe Flash Player には、アクセス制限を回避され、重要な情報を取得される脆弱性が存在します。 CVE-2016-4271 90777 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004732.html  View