Volerion logoVolerion
Volerion logoVolerion

WTW EAGLE Installer Insecure DLL Loading Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability exists in the installer of WTW EAGLE (for Windows) version 3.0.8.0, related to the Dynamic Link Library (DLL) search path. This flaw can lead to insecure loading of DLLs, potentially allowing arbitrary code execution with the privileges of the user running the installer.

Impact

Exploitation of this vulnerability could result in arbitrary code execution with the privileges of the user who invoked the installer.

Remediation

Users are advised to upgrade to WTW EAGLE (for Windows) version 1.7.6.4, as recommended by the developer.

Added: Oct 29, 2025, 5:17 AM
Updated: Oct 29, 2025, 5:17 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.9
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.