CVE-2014-1680

Published: Feb 14, 2014Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.

Affected (10)

Products: Bandisoft: Bandizip

Bandisoft

1 product

Bandizip

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Bandisoft Bandizip	Up to 3.09
Bandisoft Bandizip	Version 3.00
Bandisoft Bandizip	Version 3.01
Bandisoft Bandizip	Version 3.02
Bandisoft Bandizip	Version 3.03
Bandisoft Bandizip	Version 3.04
Bandisoft Bandizip	Version 3.05
Bandisoft Bandizip	Version 3.06
Bandisoft Bandizip	Version 3.07
Bandisoft Bandizip	Version 3.08