CVE-2014-1680

NONE

Published Feb 14, 201412y ago · Modified Jun 17, 20262w ago

Published Feb 14, 2014 12y ago

Last Modified Jun 17, 2026 2w ago

Description

Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

Public Exploit Known

No Patch Available

Affected Products 10

Vendor	Product	Version	Range
bandisoft	bandizip	*	≤3.09
bandisoft	bandizip	3.00	any
bandisoft	bandizip	3.01	any
bandisoft	bandizip	3.02	any
bandisoft	bandizip	3.03	any
bandisoft	bandizip	3.04	any
bandisoft	bandizip	3.05	any
bandisoft	bandizip	3.06	any
bandisoft	bandizip	3.07	any
bandisoft	bandizip	3.08	any

References 4

osvdb.org http://osvdb.org/102979
packetstormsecurity.com http://packetstormsecurity.com/files/125059

Exploit
bandisoft.com http://www.bandisoft.com/bandizip/history
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/90966

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.