CVE-2014-0619

Name of the Vulnerable Software and Affected Versions Hamster Free ZIP Archiver version 2.0.1.7

Description The issue allows local users to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse dwmapi.dll located in the current working directory.

Recommendations For Hamster Free ZIP Archiver version 2.0.1.7, consider removing or restricting access to the vulnerable dwmapi.dll file as a temporary workaround until a patch is available. Avoid using the affected version in environments where a Trojan horse dwmapi.dll could be introduced into the current working directory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.