CVE-2017-2252

Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and earlier, Ver.6 version 6.02 and earlier, Ver.7 version 7.02 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• File Compact (Sourcenext)
• Self-extracting Archive Files Created By File Compact (Sourcenext Corporation)

References

• https://jvn.jp/en/jp/JVN29939155/index.html