PT-2021-17883
CVE-2021-28647
·
Published
2021-04-13
·
Updated
2021-04-14
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Trend Micro Password Manager version 5 (Consumer)
Description:
The issue allows an attacker to inject a malicious DLL file during the installation process, potentially executing a malicious program each time a user installs a program. This is due to a DLL Hijacking vulnerability.
Recommendations:
For Trend Micro Password Manager version 5 (Consumer), consider disabling the installation functionality until a patch is available to prevent exploitation of the DLL Hijacking vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾