DLL Hijacking Vulnerability in Whale Browser Installer by Whale Company
CVE-2018-12449

7.8HIGH

Key Information:

Vendor

Naver Corporation

Status
Whale Browser Installer
Vendor
CVE Published:
11 October 2018

What is CVE-2018-12449?

The Whale browser installer versions up to 0.4.3.0 are susceptible to DLL hijacking. This vulnerability allows an attacker to exploit the installer by placing a malicious DLL in the installation path. When the installer is executed, it may load the malicious DLL instead of the legitimate one, leading to potential unauthorized code execution and system compromise.

Affected Version(s)

Whale Browser Installer <= 0.4.3.0

References

https://cve.naver.com/detail/cve-2018-12449
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kushal Arvind Shah of Fortinet's FortiGuard Labs
.