CVE-2017-11742: High severity Libexpat Project Libexpat vulnerability
The writeRandomBytesRtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan horse ADVAPI32.DLL in the current working directory because of an untrusted search path, aka DLL hijacking.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11742?
CVE-2017-11742 is considered a moderate severity vulnerability due to the potential for local privilege escalation.
How do I fix CVE-2017-11742?
To fix CVE-2017-11742, update to a later version of libexpat beyond 2.2.2 that addresses the DLL hijacking issue.
Who is affected by CVE-2017-11742?
CVE-2017-11742 affects local users on Windows systems running vulnerable versions of libexpat, specifically 2.2.1 and 2.2.2.
What does CVE-2017-11742 exploit?
CVE-2017-11742 exploits an untrusted search path vulnerability allowing a Trojan horse ADVAPI32.DLL to be used for privilege escalation.
Is there a known workaround for CVE-2017-11742?
As a workaround for CVE-2017-11742, ensure that the working directory does not contain untrusted or malicious DLL files.