U-063: RSA SecurID Software Token for Windows DLL Loading Error Lets Remote Users Execute Arbitrary Code

Discussion: A vulnerability was reported in RSA SecurID Software Token. A remote user can execute arbitrary code on the target system. A remote user can create a specially crafted DLL file on a remote share (e.g., WebDAV, SMB share). When the target user opens a Software Token file on the share, the application may load the remote user's DLL instead of the intended DLL and execute arbitrary code.

[kaito834]

「RSA SecurID Software Token for Windows」におけるDLL Hijackingの問題が修正された。CVE-2011-4141。