CVE-2023-47113: DLL Search Order Hijacking vulnerability in BleachBit for Windows
Published Nov 8, 2023
·Updated
BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been patched in version 4.5.0.
Affected Software
2 affected components
All of the following
BleachBit BleachBit<=4.4.2
Microsoft Windows
Event History
Nov 8, 2023
CVE Published
via MITRE·09:57 PM
Data Sourced
via MITRE·09:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the CVE ID for this vulnerability?
CVE-2023-47113
2
What is the title of this vulnerability?
DLL Search Order Hijacking vulnerability in BleachBit for Windows
3
What is BleachBit?
BleachBit cleans files to free disk space and to maintain privacy.
4
Which version of BleachBit for Windows is affected?
BleachBit for Windows up to version 4.4.2 is affected.
5
How can an attacker exploit this vulnerability?
By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows.