← Vulnerability feed

Vulnerability record · CVE-2017-1000010 · published 17 July 2017

CVE-2017-1000010: Audacityteam audacity uncontrolled search path element vulnerability

Audacityteam · Audacity

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution.

7.8 CVSS 3.1 High EPSS 2.1% · top 18.7% CWE-427 · Uncontrolled search path element
7.8CVSS 3.1 base score, v2 6.8
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/GitHubAssessments/CVE_Assessments_10_2019 Third Party Advisory
https://packetstormsecurity.com/files/140365/Audacity-2.1.2-DLL-Hijacking.html Third Party AdvisoryVDB Entry
https://github.com/GitHubAssessments/CVE_Assessments_10_2019 Third Party Advisory
https://packetstormsecurity.com/files/140365/Audacity-2.1.2-DLL-Hijacking.html Third Party AdvisoryVDB Entry

Track CVE-2017-1000010 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-0490Audacityteam audacity out-of-bounds write vulnerabilityStack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions be…EPSS 17%5.5CVE-2016-2540Audacityteam audacity memory buffer overflow vulnerabilityAudacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted FORMATCHUNK struct…EPSS 1.9%5.5CVE-2016-2541Audacityteam audacity memory buffer overflow vulnerabilityAudacity before 2.1.2 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted MP2 file.EPSS 1.1%5.0CVE-2007-6061Audacityteam audacity link following vulnerabilityAudacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local us…EPSS 3.4%3.3CVE-2020-11867Audacityteam audacity incorrect default permissions vulnerabilityAudacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permi…EPSS 0.48%7.8CVE-2020-3433Cisco AnyConnect Windows client DLL hijacking via IPC channelCisco AnyConnect Secure Mobility Client for Windows fails to properly validate resources loaded at run time, allowing a DLL hijacking attack through …KEVEPSS 10%analysed6.5CVE-2020-3153Cisco AnyConnect Windows Installer Path Handling Privilege EscalationThe Cisco AnyConnect Secure Mobility Client for Windows installer mishandles directory paths, letting an authenticated local user copy attacker-suppl…KEVEPSS 28%analysed

Source: NIST National Vulnerability Database (record CVE-2017-1000010), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.