CVE-2017-2252

CVE-2017-2252 is an untrusted search path vulnerability affecting self-extracting archive files created by SourceNext File Compact versions 5.10 and earlier, 6.02 and earlier, and 7.02 and earlier. This vulnerability allows an attacker to gain privileges by introducing a malicious DLL into an unspecified directory, which is then loaded by the vulnerable software. With a CVSS score of 7.8 (HIGH), the attack requires user interaction (UI:R) but has low attack complexity (AC:L), potentially leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.