CVE-2016-1281

HIGH

TrueCrypt 7.1a-7.2 and VeraCrypt < 1.16 - Untrusted Search Path DLL Hijacking

Title source: llm

Description

Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking attacks via a Trojan horse DLL in the "application directory", as demonstrated with the USP10.dll, RichEd20.dll, NTMarta.dll and SRClient.dll DLLs.

References (2)

Core 2

Core References

Patch, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2016/01/11/1

Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2016/Jan/22

Scores

CVSS v3 7.8

EPSS 0.0080

EPSS Percentile 51.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-426

Status published

Products (3)

idrix/truecrypt 7.1 a

idrix/truecrypt 7.2

idrix/veracrypt < 1.16

Published Jan 23, 2017

Tracked Since Feb 18, 2026