CVE-2017-5234

Summary

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.

Affected Software

VendorProductVersion RangeStatus
Rapid7Insight CollectorAll versions prior to version 1.0.16affected

Weaknesses

  • DLL Preloading

ADP Enrichment

CVE Program Container

Additional References

References