CVE-2023-4770

Summary

CVE-2023-4770 is a newly discovered vulnerability that affects the 4D and 4D server Windows executables applications, specifically version 19 R8 100218. The issue involves an uncontrolled search path element, which allows an attacker to hijack a DLL (Dynamic Link Library) file named shfolder.dll in the installation path. By replacing this file with a malicious one, an arbitrary code execution can be achieved. This vulnerability poses a significant risk to systems running the affected software and necessitates prompt patching.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.