RSA SecurID Software Token Insecure Library Loading Vulnerability
Last Update Date:
16 Dec 2011 10:43
Release Date:
16 Dec 2011
5628
Views
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability has identified in RSA SecurID Software Token, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to the application loading libraries (e.g. wintab32.dll) in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into e.g. opening a Software Token (".sdtid") file located on a remote WebDAV or SMB share. Successful exploitation allows execution of arbitrary code.
Impact
- Remote Code Execution
System / Technologies affected
- RSA SecurID Software Token version prior to 4.1.1
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 4.1.1.
Vulnerability Identifier
Source
Related Link
Share with