CVE-2017-2130

Опубликовано: 28 апр. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Ссылки

http://jvn.jp/en/jp/JVN93699304/index.html
Third Party Advisory
VDB Entry
http://www.securebrain.co.jp/about/news/2017/03/170316.html
Vendor Advisory
http://www.securityfocus.com/bid/97113
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN93699304/index.html
Third Party Advisory
VDB Entry
http://www.securebrain.co.jp/about/news/2017/03/170316.html
Vendor Advisory
http://www.securityfocus.com/bid/97113
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:securebrain:phishwall_client:*:*:*:*:*:internet_explorer:*:*

Версия до 3.7.13 (включая)

EPSS

Процентиль: 59%

0.0039

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-g8r7-88vw-g9xx