Description (CNA)
The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Digital Arts Inc. / FinalCode Ver.5 series | affected prior to 5.43R01 |
| Digital Arts Inc. / FinalCode Ver.6 series | affected prior to 6.51R01 |
CWE
CWE-427
References
- https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20260226_01.pdf
- https://jvn.jp/en/jp/JVN48498976/
ADP enrichment
No English description supplied.
No references supplied.