Tally Prime Edit Log DLL Hijacking Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A DLL hijacking vulnerability has been identified in Tally Prime Edit Log version 2.1, specifically within the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code by uploading a crafted DLL. The issue arises because TextShaping.dll is absent from the installed path of Easy Chat Server, enabling the execution of malicious code or the establishment of persistence on the victim's machine.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
4.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.