PT-2017-15298
CVE-2017-2252
·
Publicado
2017-07-14
·
Atualizado
2018-02-17
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
File Compact Ver.5 versions 5.10 and earlier
File Compact Ver.6 versions 6.02 and earlier
File Compact Ver.7 versions 7.02 and earlier
Description
The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability in self-extracting archive files.
Recommendations
For File Compact Ver.5 versions 5.10 and earlier, update to a version later than 5.10 to resolve the issue.
For File Compact Ver.6 versions 6.02 and earlier, update to a version later than 6.02 to resolve the issue.
For File Compact Ver.7 versions 7.02 and earlier, update to a version later than 7.02 to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾