Untrusted Search Path Vulnerability in Bandisoft Bandizip
CVE-2014-1680

Currently unrated

Key Information:

Vendor: Bandisoft
Status: Bandizip
Vendor: CVE Published:; 14 February 2014

What is CVE-2014-1680?

The vulnerability in Bandisoft Bandizip, present in versions prior to 3.10, allows local users to exploit an untrusted search path. By placing a malicious dwmapi.dll file in the current working directory, an attacker can potentially execute unauthorized code and gain elevated privileges on the system. This vulnerability highlights the importance of secure coding practices and proper management of dynamic link libraries to safeguard user systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch