PT-2017-11554 · Fuji Xerox · Docuworks+1

Publicado 2017-09-01 · Atualizado 2017-09-06 · CVE-2017-10848

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DocuWorks versions 8.0.7 and earlier DocuWorks Viewer Light versions published in Jul 2017 and earlier

Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability in the installers for the affected software.

Recommendations For DocuWorks versions 8.0.7 and earlier, update to a version later than 8.0.7 to resolve the issue. For DocuWorks Viewer Light versions published in Jul 2017 and earlier, update to a version published after Jul 2017 to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-10848

Produtos afetados

Docuworks

Docuworks Viewer Light

Referências · 4

• http://fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10848 · Nota de Segurança
• https://jvn.jp/en/jp/JVN09769017/index.html · Nota
• https://osv.dev/vulnerability/CVE-2017-10848 · Aviso do Fabricante