CVE-2017-5236 Other in AppSpider Pro

High 7.8 Published 3 May 2017 Updated 5 Aug 2024

Attackers can execute arbitrary code by placing a malicious DLL in the installer's working directory, affecting Rapid7 AppSpider Pro users.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2017-5236?

CVE-2017-5236 is a high-severity vulnerability in Rapid7 AppSpider Pro, published on 3 May 2017. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Weakness: CWE-426

Which versions are affected by CVE-2017-5236?

It affects 1 product.

Products include Rapid7 Appspider Pro.

How do I fix CVE-2017-5236?

No fix has been published for CVE-2017-5236 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-5236 being exploited?

There is no known exploitation of CVE-2017-5236 in the wild and no public exploit code.

Sources

Also known as GHSA-jxg9-2w2r-prxg.