eMPIA Technology AVACAST DLL Hijacking Vulnerability Allowing Arbitrary Code Execution

A DLL hijacking vulnerability has been identified in AVACAST developed by eMPIA Technology. This vulnerability allows authenticated local attackers to place a malicious DLL in a specific directory. When the system loads the DLL, it can execute arbitrary code with system privileges. This issue affects AVACAST for Windows, version 5.10.10.43 and earlier.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with system privileges, potentially allowing attackers to manipulate system functions or access sensitive information.

Remediation

Users are advised to update AVACAST to version 5.10.10.45 or later.