Secunia

A vulnerability has been reported in KeePass Password Safe, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the application loading libraries in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into e.g. opening a KeePass Password Database (.kdb) file located on a remote WebDAV or SMB share.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in versions prior to 1.18.

Solution
Update to version 1.18.

Provided and/or discovered by
Reported by an unknown person.

Original Advisory
KeePass:
http://keepass.info/news/n100902_1.18.html

Peter Van Eeckhoutte:
http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area