CVE-2017-15383

Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\Nero directory.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-10-16

Last modified

2024-09-17

Weaknesses

CWE-428

Affected products

• Nero (Nero)

References

• https://cxsecurity.com/issue/WLB-2016110092
• https://packetstormsecurity.com/files/139658/Nero-7.10.1.0-Privilege-Escalation.html