Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Referenceshttps://jvn.jp/en/jp/JVN21369452/index.htmlhttp://chitora.com/jvn21369452.html