Untrusted Search Path Vulnerability in Baidunetdisk by Baidu

CVE-2021-36631

What is CVE-2021-36631?

Baidunetdisk versions 7.4.3 and earlier are susceptible to an untrusted search path vulnerability. This flaw enables an attacker to exploit the application's ability to load Dynamic Link Library (DLL) files from a directory that may be controlled by the attacker. By placing a malicious DLL in an unspecified directory, an attacker can execute their code with the privileges of the user running the application, potentially leading to system compromise.

References