CVE-2023-4770 Information

Description

An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path causing an arbitrary code execution.

Reference

https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-search-path-element-vulnerability-4d-and-4d-windows-server

Share on: