← Back

CVE-2019-19161

nvd nist
Published: Jun 30, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.

Affected (1)

Cymiinstaller322 Activex Project
1 product
Cymiinstaller322 Activex
Configuration A
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Cymiinstaller322 Activex
Up to 2016.5.26.1
Running on/withPlatform Versions
Microsoft
Windows 10
All versions
Microsoft
Windows 7
All versions
Microsoft
Windows 8
All versions

Related CWEs

CWE-426
Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

References (4)

Source: vuln@krcert.or.kr
Third Party Advisory
Source: vuln@krcert.or.kr
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.