CVE-2017-5233 Other in AppSpider Pro

High 7.8 Published 2 Mar 2017 Updated 5 Aug 2024

Attackers can execute arbitrary code via DLL preloading when users run vulnerable Rapid7 AppSpider Pro installers from a directory containing a malicious DLL.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2017-5233?

CVE-2017-5233 is a high-severity vulnerability in Rapid7 AppSpider Pro, published on 2 Mar 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Weakness: CWE-426

Which versions are affected by CVE-2017-5233?

It affects 1 product.

Products include Rapid7 Appspider Pro.

How do I fix CVE-2017-5233?

No fix has been published for CVE-2017-5233 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-5233 being exploited?

There is no known exploitation of CVE-2017-5233 in the wild and no public exploit code.

Sources

Also known as GHSA-2468-4cfj-qfq3.