CVE-2018-0563

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2018-06-26

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• The Installer Of Flets Virus Clear Easy Setup Application Tool Ver.13.0 And Earlier Versions And Flets Virus Clear V6 Easy Setup Application Tool Ver.13.0 And Earlier Versions (Nippon Telegraph And Telephone East Corporation)
• Flet's Virus Clear Easy Setup & Application Tool (Ntt-east)
• Flet's Virus Clear V6 Easy Setup & Application Tool (Ntt-east)

References

• http://jvn.jp/en/jp/JVN20040004/index.html
• https://flets.com/customer/next/sec/setup/esat_install.html
• https://flets.com/customer/tec/fvc/setup/esat_install.html