CVE-2017-10830

CVE-2017-10830 affects Security Setup Tool (all versions) from NTT West. The vulnerability is an untrusted search path (DLL search order) that allows a local attacker to gain privileges via a Trojan horse DLL placed in an unspecified directory. Documented impact indicates the potential for arbitr...

CVE-2017-10828

The CVE-2017-10828 issue affects Flets Install Tool installers distributed by NTT West. The root cause is an insecure DLL search path (untrusted search path) that can allow loading a Trojan/DLL, enabling arbitrary code execution with the caller’s privileges when running the installer. Affected ve...

CVE-2017-10830

Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10836

CVE-2017-10836 affects Optimal Guard (OPTiM) installers—versions 1.1.21 and earlier. The root cause is an untrusted/insecure DLL search path (CWE-427), allowing a Trojan horse DLL placed in a directory to be loaded and execute arbitrary code with the caller’s privileges. Documented impact: arbitr...

CVE-2017-10836

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10812

Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10827

The CVE-2017-10827 entry affects Flets Azukeru for Windows Auto Backup Tool (v1.0.3.0 and earlier). The connected sources confirm an untrusted search path vulnerability where a Trojan horse DLL in an unspecified directory can be loaded, enabling privilege escalation when the vulnerable component ...

CVE-2017-10812

CVE-2017-10812 corresponds to an untrusted search path vulnerability in Photo Collection PC Software (NTT DOCOMO) versions ≤ 4.0.2. The underlying issue is insecure DLL/executable search paths (CWE-427) that allow a local attacker to execute arbitrary code with the privileges of the user invoking...

CVE-2015-0974

Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mmsdllr.dll or mediaplayerdll.dll...

Design/Logic Flaw

Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mmsdllr.dll or mediaplayerdll.dll...

CVE-2015-0974

CVE-2015-0974 affects ZTE Datacard MF19 0V1.0.0B04 (mobiconnect). Root cause: untrusted search path allows a local attacker to cause privilege escalation by referencing a malicious DLL (mms_dll_r.dll or mediaplayerdll.dll) in the 'Ucell Internet' directory, yielding complete control. Public explo...

CVE-2015-0974

Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mmsdllr.dll or mediaplayerdll.dll...

CVE-2017-9644

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5....

CVE-2017-9644

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5....

CVE-2017-9644

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5....

Design/Logic Flaw

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5....

CVE-2017-9644

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5....

CVE-2017-9644

CVE-2017-9644 — Normal mode Affected products (as per connected docs): Automated Logic Corporation WebCTRL, i-Vu, SiteScan Web 6.5 and prior; 6.1 and prior; 6.0 and prior; 5.5 and prior; 5.2 and prior. Root cause: An Unquoted Search Path or Element vulnerability in the installation paths. Impact:...

Installer of "Flets Install Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Install Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

Installer of "Flets Azukeru for Windows Auto Backup Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Azukeru for Windows Auto Backup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability...