CVE-2017-2287

CVE-2017-2287 affects Sony’s NFC Port Software remover (Ver. 1.3.0.1 and earlier). The issue is an insecure DLL search path (CWE-427) in the DLL loading process, allowing arbitrary code execution with the user’s privileges if exploited. Affected component: NFC Port Software remover executable; ro...

CVE-2017-2287: Uncontrolled Search Path Element

Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2017-15327

Name of the Vulnerable Software and Affected Versions NFC Port Software remover versions 1.3.0.1 and earlier Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability. Recommendations For...

NFC Port Software remover may insecurely load Dynamic Link Libraries

Overview NFC Port Software remover provided by Sony Corporation is an application to remove NFC Port Software. NFC Port Software remover contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...