CVE-2017-10825

Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-11-02

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Flets Easy Setup Tool (Flets-w)
• Installer Of Flets Easy Setup Tool (Nippon Telegraph And Telephone West Corporation)

References

• http://flets-w.com/topics/setup_tool_vulnerability/
• https://jvn.jp/en/jp/JVN97243511/278948/index.html