Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2021-38469

AUVESY Versiondog

Description

Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AUVESY Versiondog

  • All to ≤ 8.0affected

References