CVE-2018-6461 is an Insecure Library Loading vulnerability affecting March Hare WINCVS before 2.8.01 build 6610 and CVS Suite before 2009R2 build 6610. This flaw allows local users to potentially gain elevated privileges by placing a malicious Python or TCL DLL file in the current working directory. With a CVSS score of 7.8 (High), it presents a significant risk, as an attacker could achieve high confidentiality, integrity, and availability impacts with low attack complexity, requiring user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.0, < 2.8.01CPE matchmatch criteria | cpe:2.3:a:march-hare:wincvs:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.