CVE-2017-11160

https://notcve.org/view.php?id=CVE-2017-11160

18 Aug 2017 — Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory. Múltiples vulnerabilidades de ruta de búsqueda no confiable en installer en Synology Assistant en versiones anteriores a la 6.1-15163 en Windows permite que atacantes locales ejecuten código ar... • https://www.synology.com/en-global/support/security/Synology_SA_17_44_Synology_Assistant • CWE-426: Untrusted Search Path •