CVE-2016-1417

Name of the Vulnerable Software and Affected Versions Snort version 2.9.7.0-WIN32

Description The issue allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse tcapi.dll located in the same folder on a remote file share as a pcap file that is being processed.

Recommendations For Snort version 2.9.7.0-WIN32, consider restricting access to remote file shares to minimize the risk of exploitation until a patch is available. Avoid using remote file shares for processing pcap files until the issue is resolved.