| Package | Affected versions | Patched versions |
|---|---|---|
| virtual private network software development kit | < 1.3.3.218 | 1.3.3.218 |
An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free