CVE-2017-10860 Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable fi...
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| daj i-filter installer | = 6.0 | No fix listed |
| Digital Arts Inc. "i-filter 6.0 installer" | = timestamp of code signing is before 23 Aug 2017 (JST) | No fix listed |
References
- www.daj.jp vendor-advisory
- 100916 vdb-entry
- JVN#75929834 third-party-advisory vdb-entry