CVE-2017-12480

Published: Aug 6, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\Local\Temp directory.

Affected (1)

Products: Sandboxie: Sandboxie Installer

Sandboxie

1 product

Sandboxie Installer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sandboxie Sandboxie Installer	Version 5071703

Related CWEs

CWE-426

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (2)

https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41

Source: cve@mitre.org

https://medium.com/%40BaYinMin/cve-2017-12480-sandboxie-installer-dll-hijacking-or-unsafe-dll-loading-vulnerability-41ad0562f41

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.