CVE-2018-0598

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description The issue concerns an untrusted search path vulnerability in self-extracting archive files created by IExpress, which is bundled with Microsoft Windows. This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.