CVE-2018-16189

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-02-13 · updated 2026-06-17
Weakness: CWE-426

Description

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Micco The installer of UNLHA32.DLL: before 3.00 — fixed in 3.00

How to fix

Upgrade to a fixed version: Micco The installer of UNLHA32.DLL 3.00. Check the vendor advisory for mitigations.

References

http://jvn.jp/en/jp/JVN52168232/index.html
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm
http://jvn.jp/en/jp/JVN52168232/index.html
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm

Get alerted when CVE-2018-16189 or the next vulnerability affects your stack