High severity7.8NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026

CVE-2016-1281

Description

Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application directory", as demonstrated with the USP10.dll, RichEd20.dll, NTMarta.dll and SRClient.dll DLLs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Idrix/Truecrypt2 versions
cpe:2.3:a:idrix:truecrypt:7.1:a:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:idrix:truecrypt:7.1:a:*:*:*:*:*:*
- cpe:2.3:a:idrix:truecrypt:7.2:*:*:*:*:*:*:*
Idrix/Veracrypt
cpe:2.3:a:idrix:veracrypt:*:*:*:*:*:*:*:*
Range: <=1.16
VeraCrypt/VeraCryptllm-create
Range: <1.17-BETA
Truecrypt Foundation/Truecryptllm-create
Range: 7.2, 7.1a

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2016/01/11/1nvdPatchThird Party Advisory
seclists.org/fulldisclosure/2016/Jan/22nvdExploitMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000