NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution

Discussion in 'News Aggregator' started by Packet Storm, 13 Mar 2019.

  1. Packet Storm

    Packet Storm Guest

    BEopt suffers from a DLL Hijacking issue. The vulnerability is caused due to the application loading libraries (sdl2.dll and libegl.dll) in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into opening a related application file .BEopt located on a remote WebDAV or SMB share. Version 2.8.0 is affected.

    Continue reading...
     

Share This Page

Loading...