PT-2018-11274 · Infraware · Polaris Office

Hyp3Rlinx + 1 · Publicado 2018-06-28 · Atualizado 2025-07-30 · CVE-2018-12589

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Polaris Office 2017 version 8.1

Description The issue allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.

Recommendations For Polaris Office 2017 version 8.1, consider removing or restricting access to the puiframeworkproresenu.dll file in the current working directory until a patch is available.

Exploit

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2018-12589

Produtos afetados

Polaris Office

Referências · 4

• 🔥 https://exploit-db.com/exploits/44985 · Exploit
• 🔥 http://packetstormsecurity.com/files/148312/Polaris-Office-2017-8.1-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-12589 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12589 · Aviso do Fabricante