CVE-2018-0648

Description

Untrusted search path vulnerability in installer of ChatWork Desktop App for Windows 2.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• ChatWork Co,. LTD. / Installer of ChatWork Desktop App for Windows2.3.0 and earlier – 2.3.0 and earlier

References

• MISChttp://jvn.jp/en/jp/JVN39171169/index.html
• MISChttps://go.chatwork.com/download/