Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29954
HistoryApr 11, 2021 - 5:06 a.m.

DLL Hijacking

2021-04-1105:06:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.0004 Low

EPSS

Percentile

5.1%

clamav is vulnerable to DLL hijacking. The vulnerability is due to insufficient validation of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on an affected system. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges.

CPENameOperatorVersion
clamav:3.13eq0.103.1-r0

0.0004 Low

EPSS

Percentile

5.1%