A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location.
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 73.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 73.00 |
VPI formula vpi-v1