DLL Hijacking Vulnerability in Veritas System Recovery by Veritas

CVE-2017-7444

Summary

A vulnerability exists in Veritas System Recovery prior to version 16 SP1, allowing potential attackers to exploit DLL hijacking. If an attacker possesses write access to the directory from which the product is executed, they may execute malicious code by placing a DLL file in the installation path. This security flaw highlights the importance of controlling write access to sensitive directories to prevent unauthorized execution of potentially harmful code.

References