Untrusted Search Path Vulnerability in TrueCrypt and VeraCrypt Installers
CVE-2016-1281

7.8HIGH

Key Information:

Vendor

Idrix

Status
Truecrypt
Veracrypt
Vendor
CVE Published:
23 January 2017

What is CVE-2016-1281?

The installers for TrueCrypt versions 7.2 and 7.1a, as well as VeraCrypt versions prior to 1.17-BETA, contain an untrusted search path vulnerability. This flaw can allow local users to execute arbitrary code with elevated privileges, facilitating DLL hijacking attacks. Attackers may exploit this vulnerability by placing a malicious DLL in the application directory, leading to the execution of their code. Example DLLs involved include USP10.dll, RichEd20.dll, NTMarta.dll, and SRClient.dll. Users of these applications are strongly advised to ensure they are using the latest secure versions.

References

http://www.openwall.com/lists/oss-security/2016/01/11/1
mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2016/Jan/22
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.