CVE-2019-19161 — To be able to change Dll Files to preload with missing support for integrity check vulnerability MIPLATFORM ActiveX o…

CVE-2019-19161

To be able to change Dll Files to preload with missing support for integrity check vulnerability MIPLATFORM ActiveX of TOBESOFT.CO.LTD, PUBLISHED

Description (CNA)

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.

Affected (CNA)

Vendor / product	Versions
TOBESOFT.CO.LTD / MIPLATFORM	affected unspecified through 2016.5.26.1

CWE

No CWE identifiers supplied.

References

https://www.tobesoft.com/Index.do
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479

ADP enrichment

CVE

No English description supplied.

https://www.tobesoft.com/Index.do
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479