PT-2017-11562
CVE-2017-10859
·
Published
2017-09-15
·
Updated
2017-09-21
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
i-filter 6.0 installer version before 23 Aug 2017
Description
The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability.
Recommendations
For i-filter 6.0 installer version before 23 Aug 2017, ensure that the timestamp of code signing is updated to 23 Aug 2017 (JST) or later to prevent exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾