PT-2017-11564 · I-Filter · I-Filter

Eili Masami · Publicado 2017-09-15 · Atualizado 2017-09-22 · CVE-2017-10860

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions i-filter 6.0 installer version before 23 Aug 2017

Description The issue allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory, due to an untrusted search path vulnerability.

Recommendations For i-filter 6.0 installer version before 23 Aug 2017, ensure the timestamp of code signing is updated to 23 Aug 2017 (JST) or later to prevent exploitation.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-10860

Produtos afetados

I-Filter

Referências · 5

• http://securityfocus.com/bid/100916 · Nota
• https://jvn.jp/en/jp/JVN75929834/index.html · Nota
• http://daj.jp/cs/info/2017/0912 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-10860 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10860 · Nota de Segurança