High severity7.8NVD Advisory· Published Feb 5, 2018· Updated Jun 17, 2026

CVE-2018-6461

Description

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

March Hare/WINCVSllm-fuzzy
Range: before 2.8.01 build 6610
March Hare/Cvs Suitellm-fuzzy
Range: before 2009R2 build 6610

Patches

Vulnerability mechanics

References

hyp3rlinx.altervista.org/advisories/CVS-SUITE-2009R2-INSECURE-LIBRARY-LOADING-CVE-2018-6461.txtnvdExploitThird Party Advisory
packetstormsecurity.com/files/146267/WINCVS-2009R2-DLL-Hijacking.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2018/Feb/24nvdExploitMailing ListThird Party Advisory
march-hare.com/cvspro/vulnwincvs.htmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000