CVE-2022-44939

HIGH

Echatserver Easy Chat Server - Uncontrolled Search Path

Title source: rule

Description

Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL.

References (1)

[Exploit, Third Party Advisory] https://github.com/RashidKhanPathan/WindowsPrivilegeEscalation/blob/main/DLL%20Hijacking/CVE-2022-44939/Research.txt

View Exploit ZIP pw:eip

Scores

CVSS v3 7.8

EPSS 0.0008

EPSS Percentile 22.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (1)

echatserver/easy_chat_server

Timeline

Published Jan 06, 2023

Tracked Since Feb 18, 2026