CVE-2026-32679: Japan Media Systems Corporation

Описание

Оригинално описание

The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (CanonNWCamPlugin.exe and CanonNWCamPluginForAdmin.exe) insecurely load Dynamic Link Libraries (DLLs). If a malicious DLL is placed at the same directory, the affected installer may load that DLL and execute its code with the privilege of the user invoking the installer.

Засегнати продукти

• Japan Media Systems Corporation Downloader5Installer.exe: Ver.1.0.0.0
• Japan Media Systems Corporation Downloader5InstallerForAdmin.exe: Ver.1.0.0.0
• Japan Media Systems Corporation CanonNWCamPlugin.exe: Ver.1.0.0.0
• Japan Media Systems Corporation CanonNWCamPluginForAdmin.exe: Ver.1.0.0.0

Вид слабост

• CWE-427 Неконтролиран елемент от пътя за търсене

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-32679
• https://nvd.nist.gov/vuln/detail/CVE-2026-32679
• https://web.liveon.ne.jp/wp-content/uploads/2026/04/JMSSA2026-001.pdf
• https://jvn.jp/en/jp/JVN45563482/