PT-2017-11562 · I-Filter · I-Filter

Eili Masami · Publicado 2017-09-15 · Atualizado 2017-09-21 · CVE-2017-10859

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions i-filter 6.0 installer version before 23 Aug 2017

Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability.

Recommendations For i-filter 6.0 installer version before 23 Aug 2017, ensure that the timestamp of code signing is updated to 23 Aug 2017 (JST) or later to prevent exploitation.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-10859

Produtos afetados

I-Filter

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-10859 · Aviso do Fabricante
• http://daj.jp/cs/info/2017/0912 · Aviso do Fabricante
• https://jvn.jp/en/jp/JVN75929834/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-10859 · Nota de Segurança