CVE-2017-10888

CVE-2017-10888 affects BOOK WALKER for Windows (v1.2.9 and earlier) and Mac (v1.2.5 and earlier). The connected documents describe an information-disclosure vulnerability (CWE-200) that may allow an attacker to access local files, via unspecified vectors, on these platforms. The underlying issue ...

CVE-2017-10887

CVE-2017-10887 is a DLL preloading (untrusted search path) vulnerability in BOOK WALKER for Windows (≤ v1.2.9). The installer can load a Trojan horse DLL from an unspecified directory, enabling arbitrary code execution with the user’s privileges prior to installation. Affected products are BOOK W...