MailEnable DLL Hijacking Vulnerability Allowing Local Arbitrary Code Execution

A DLL hijacking vulnerability has been identified in MailEnable versions prior to 10.54. The issue arises because the MailEnable administrative executable loads MEAIPC.DLL from its installation directory without proper integrity checks or a secure search order. This flaw allows local attackers with write access to the directory to place a malicious MEAIPC.DLL, which is then executed, leading to arbitrary code execution with the privileges of the MailEnable process.

Impact

Exploitation of this vulnerability allows for local arbitrary code execution, with the executed code running under the privileges of the MailEnable administrative process.

Remediation

Users can upgrade to MailEnable version 10.54 or later to address this vulnerability.