7.8Hoch

CVE-2026-25191

Digital Arts Inc. FinalCode Ver.5 series; Digital Arts Inc. FinalCode Ver.6 series Veröffentlicht: (vor 8 Monaten)

Beschreibung

The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.

Schwachstellentyp (CWE): CWE-427

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Digital Arts Inc. FinalCode Ver.5 series prior to 5.43R01
Digital Arts Inc. FinalCode Ver.6 series prior to 6.51R01

Referenzen und Patches