CVE-2017-2246

Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

• CWE-426

• http://chitora.com/jvn21369452.htmlVendor Advisory
• https://jvn.jp/en/jp/JVN21369452/index.htmlThird Party Advisory, VDB Entry
• http://chitora.com/jvn21369452.htmlVendor Advisory
• https://jvn.jp/en/jp/JVN21369452/index.htmlThird Party Advisory, VDB Entry

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2240Directory traversal vulnerability in AssetView for MacOS Ver…
• CVE-2017-2241SQL injection vulnerability in the AssetView for MacOS Ver.9…
• CVE-2017-2242Untrusted search path vulnerability in Flets Setsuzoku Tool …
• CVE-2017-2243Cross-site scripting vulnerability in Responsive Lightbox pr…
• CVE-2017-2244Cross-site request forgery (CSRF) vulnerability in MFC-J960D…8.8
• CVE-2017-2245Directory traversal vulnerability in Shortcodes Ultimate pri…5
• CVE-2017-2247Untrusted search path vulnerability in Self-extracting archi…
• CVE-2017-2248Untrusted search path vulnerability in Installer of Lhaz+ ve…
• CVE-2017-2249Untrusted search path vulnerability in Self-extracting archi…
• CVE-2017-2252Untrusted search path vulnerability in self-extracting archi…
• CVE-2017-2253Untrusted search path vulnerability in Installer of Yahoo! T…
• CVE-2017-2254Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a d…