Executive brief
ownCloud Desktop is a file synchronization application used to manage and share corporate data. A security flaw in older versions allows a local user to place a malicious file in a specific location on the computer's hard drive, which the application then executes. This could allow an attacker to take full control of the system, access sensitive files, or escalate their privileges.
Technical details
A DLL hijacking or insecure library loading vulnerability exists in ownCloud Desktop versions prior to 2.2.3. The application attempts to load a library from a 'special path' on the C: drive without sufficient validation, allowing a local attacker to place a malicious 'Trojan' library in that location. Because the application may run with elevated permissions or be used by multiple users, this can lead to arbitrary code execution and local privilege escalation. The attack requires local access to the file system but no specific user interaction or prior authentication within the app. The issue is resolved in version 2.2.3.
Affected products
- ownCloud ownCloud Desktop Before 2.2.3
Timeline
- 2016-08-24: disclosed: Initial disclosure via SecurityFocus (BID 92627)
- 2017-01-23: advisory: NVD publication date