CVE-2017-2287

CVE-2017-2287 affects Sony’s NFC Port Software remover (Ver. 1.3.0.1 and earlier). The issue is an insecure DLL search path (CWE-427) in the DLL loading process, allowing arbitrary code execution with the user’s privileges if exploited. Affected component: NFC Port Software remover executable; ro...

NFC Port Software remover may insecurely load Dynamic Link Libraries

Overview NFC Port Software remover provided by Sony Corporation is an application to remove NFC Port Software. NFC Port Software remover contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...