CVE-2017-11159

https://notcve.org/view.php?id=CVE-2017-11159

Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory. Múltiples vulnerabilidades de ruta de búsqueda no confiable en installer en Synology Photo Station Uploader en versiones anteriores a la 1.4.2-084 en Windows permite que atacantes locales ejecuten código arbitrario y lleven a cabo un secuestro de DLL mediante un archivo troyano (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll o (4) dwmapi.dll en el directorio de trabajo actual. • https://www.synology.com/en-global/support/security/Synology_SA_17_45_Photo_Station_Uploader • CWE-426: Untrusted Search Path CWE-427: Uncontrolled Search Path Element •