CVE-2017-2249

CVE-2017-2249 describes an untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier. An attacker can exploit this by placing a malicious DLL in an unspecified directory, leading to privilege escalation. This vulnerability carries a high CVSS score of 7.8, indicating a local attack vector with low complexity, requiring user interaction, and potentially resulting in high impact to confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.