CVE-2017-12580

CVE-2017-12580 is a DLL hijacking vulnerability affecting IDM UltraEdit versions through 24.10.0.32. An attacker can place a malicious DLL with a specific name (e.g., "ntmarta.dll") in the same directory as the UltraEdit executable, which will be loaded instead of the legitimate Windows DLL when the installer is run. This allows for arbitrary code execution on the affected system. The vulnerability has a CVSS v3.1 score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.