Description (CNA)
The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sony Corporation / INZONE Hub | affected 1.0.10.3 to 1.0.17.0 |
CWE
CWE-427
References
- https://www.sony.com/electronics/support/others-software/inzone-hub
- https://jvn.jp/en/jp/JVN28247549/
ADP enrichment
No English description supplied.
No references supplied.