CVE-2022-27965

Description

Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected Platforms

Weakness Type

CWE-428

References

• https://github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-…
• https://www.netsarang.com/en/xlpd-update-history/
• https://github.com/ycdxsb/Vuln/tree/main/NetSarang-CreateProcessW-Misuse-Binary-…
• https://www.netsarang.com/en/xlpd-update-history/