CVE-2017-2249

Name of the Vulnerable Software and Affected Versions Lhaz+ versions 3.4.0 and earlier

Description The issue concerns an untrusted search path vulnerability in self-extracting archive files created by Lhaz+. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Recommendations For versions 3.4.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.