CVE-2016-10157: Code Injection

Published Jan 23, 2017

Updated

Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because the mentioned DLL is missing from the installation, thus making it possible to hijack the DLL and subsequently inject code within the Akamai NetSession process space.

Affected Software

1 affected component

Akamai NetSession=1.9.3.1

Event History

Jan 23, 2017

CVE Published

via MITRE·06:49 AM

Data Sourced

via MITRE·06:49 AM

Description

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-10157?

CVE-2016-10157 is considered to have a medium severity due to its potential exploitation for DLL hijacking.

How do I fix CVE-2016-10157?

To mitigate CVE-2016-10157, ensure that the application is updated to a version that does not attempt to load CSUNSAPI.dll without a complete path.

Who is affected by CVE-2016-10157?

CVE-2016-10157 affects users of Akamai NetSession version 1.9.3.1.

What is the impact of CVE-2016-10157?

The impact of CVE-2016-10157 is the potential for an attacker to hijack the DLL and execute arbitrary code.

When was CVE-2016-10157 discovered?

CVE-2016-10157 was discovered in December 2016.