EUVD-2017-11425

Malware in sbrugna...

Flets Setsuzoku Tool for Windows Untrusted Search Path Vulnerability

Flets Setsuzoku Tool for Windows is a configuration tool for Internet connection from NIPPON TELEGRAPH AND TELEPHONE WEST, Japan. An untrusted search path vulnerability exists in Flets Setsuzoku Tool for Windows. The vulnerability can be exploited by a remote attacker to gain privileges via a...

CVE-2017-2242

Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2242

Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2242

The CVE-2017-2242 entry applies to Flets Setsuzoku Tool for Windows. A DLL search path (CWE-427) issue in the installer/load process can allow arbitrary code execution with the invoking user’s privileges if a malicious DLL is placed in a directory, affecting all versions. Public sources in connec...

Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

JVN#22272314: Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries

Installer of "Flets Setsuzoku Tool"provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the...