Vulnerability Description
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F-Secure | F-Secure Online Scanner | - |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2016/Mar/64Mailing ListThird Party Advisory
- http://www.securityfocus.com/archive/1/537803/100/0/threaded
- http://www.securityfocus.com/bid/79657Third Party AdvisoryVDB Entry
- https://www.f-secure.com/en/web/labs_global/fsc-2015-4Vendor Advisory
- http://seclists.org/fulldisclosure/2016/Mar/64Mailing ListThird Party Advisory
- http://www.securityfocus.com/archive/1/537803/100/0/threaded
- http://www.securityfocus.com/bid/79657Third Party AdvisoryVDB Entry
- https://www.f-secure.com/en/web/labs_global/fsc-2015-4Vendor Advisory
FAQ
What is CVE-2015-8264?
CVE-2015-8264 is a vulnerability with a CVSS score of 7.8 (HIGH). Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same fo...
How severe is CVE-2015-8264?
CVE-2015-8264 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-8264?
Check the references section above for vendor advisories and patch information. Affected products include: F-Secure F-Secure Online Scanner.