VYPR
← All advisories
High severity7.8NVD Advisory· Published May 3, 2017· Updated Jun 17, 2026

CVE-2017-5236

CVE-2017-5236

Description

Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Affected products

3
  • Rapid7/Appspider Pro3 versions
    cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:rapid7:appspider_pro:*:*:*:*:*:*:*:*range: <=6.14.059
    • (no CPE)range: <6.14.060
    • (no CPE)range: All version prior to 6.14.060

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.