PT-2017-15298 · Unknown · File Compact Ver.6+2

Blackwingcat + 1 · Publicado 2017-07-14 · Atualizado 2018-02-17 · CVE-2017-2252

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions File Compact Ver.5 versions 5.10 and earlier File Compact Ver.6 versions 6.02 and earlier File Compact Ver.7 versions 7.02 and earlier

Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability in self-extracting archive files.

Recommendations For File Compact Ver.5 versions 5.10 and earlier, update to a version later than 5.10 to resolve the issue. For File Compact Ver.6 versions 6.02 and earlier, update to a version later than 6.02 to resolve the issue. For File Compact Ver.7 versions 7.02 and earlier, update to a version later than 7.02 to resolve the issue.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-2252

Produtos afetados

File Compact Ver.5

File Compact Ver.6

File Compact Ver.7

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-2252 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-2252 · Aviso do Fabricante
• https://jvn.jp/en/jp/JVN29939155/index.html · Nota