description: Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified directory and to execute arbitrary code with the privilege of the user invoking the installer when a terminal is connected remotely using Remote desktop.
problem types: Untrusted search path vulnerability
affected:
{
product: Installer of MagicConnect Client program
vendor: NTT TechnoCross Corporation
versions:
status: affected, version: distributed before 2021 March 1
}