What’s Vulnerable › Vulnerabilities

CVE-2014-1680

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-02-14 · updated 2026-06-17

Description

Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory.

Affected products

• Bandisoft Bandizip: through 3.09; 3.00, 3.01, 3.02, 3.03, 3.04, 3.05 (+3)

References

• http://osvdb.org/102979
• http://packetstormsecurity.com/files/125059
• http://www.bandisoft.com/bandizip/history
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90966
• http://osvdb.org/102979
• http://packetstormsecurity.com/files/125059
• http://www.bandisoft.com/bandizip/history
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90966

Get alerted when CVE-2014-1680 or the next vulnerability affects your stack