MailEnable Unsafe DLL Loading Vulnerability Leading to Local Arbitrary Code Execution

A vulnerability exists in MailEnable versions prior to 10.54, allowing local arbitrary code execution through unsafe DLL loading. The MailEnable administrative executable loads MEAISM.DLL from its installation directory without proper integrity checks or a secure search order. A local attacker with write access to the directory can place a malicious MEAISM.DLL, which is then executed with the privileges of the MailEnable process.

Impact

Exploitation of this vulnerability allows for local arbitrary code execution with the privileges of the MailEnable process.