CVE-2016-7838

Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Vulnerabilidad de ruta de acceso no confiable en las versiones anteriores a 0.5.3 de WinSparkle, permite a atacantes remotos ejecutar código arbitrario a través de un archivo ejecutable especialmente modificado en un directorio no especificado.