PatchTheCVECVE-2017-12580: An issue was discovered in IDM UltraEdit through 24.10.0.32
CVE-2017-12580 is a high-severity flaw (CVSS 7.8) affecting ultraedit. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable (for example, "ntmarta.dll"). When the installer EXE is executed by the user, the DLL located in the EXE's current directory will be loaded instead of the Windows DLL, al
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.4% (top 70%) |
| CISA exploited list | No |
| Weakness | CWE-426 |
| Published | 2020-03-02 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-12580?
ultraedit: upgrade to newer than 24.10.0.32. Exact commands for each OS are on this page.
Is CVE-2017-12580 being exploited?
CVE-2017-12580 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-12580 affect?
CVE-2017-12580 affects ultraedit. Severity is high (CVSS 7.8). An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This
How urgent is CVE-2017-12580?
Priority 35/100. High severity