CVE-2018-6461

Name of the Vulnerable Software and Affected Versions March Hare WINCVS versions prior to 2.8.01 build 6610 March Hare CVS Suite versions prior to 2009R2 build 6610

Description The issue is related to an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file. This may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory.

Recommendations For March Hare WINCVS versions prior to 2.8.01 build 6610, update to version 2.8.01 build 6610 or later. For March Hare CVS Suite versions prior to 2009R2 build 6610, update to version 2009R2 build 6610 or later.