CVE-2018-6461
High
Description
March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory.
SeverityHigh
CVSS7.8
Exploit probability—
ProductMarch-hare Wincvs
PublishedFeb 5, 2018
First seenFeb 5, 2018
How to fix
Update
- march-hare wincvs2.8.01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| march-hare wincvs | 1.0 ≤ v < 2.8.01 | 2.8.01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.