DLL Hijacking Vulnerability in NSA Ghidra Software
CVE-2019-17665

7.8HIGH

Key Information:

Vendor

Nsa

Status
Ghidra
Vendor
CVE Published:
16 October 2019

What is CVE-2019-17665?

NSA Ghidra versions before 9.0.2 are susceptible to DLL hijacking due to the improper loading of the jansi.dll file from the current working directory. This security flaw could enable attackers to execute malicious code if they can manipulate the working environment to place a malicious jansi.dll file in the targeting directory. Organizations utilizing this software should upgrade to version 9.0.2 or later to mitigate the risk of exploitation.

References

https://github.com/NationalSecurityAgency/ghidra/issues/286
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.