Vulnerability Details CVE-2018-0563
Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.6%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
References
- http://jvn.jp/en/jp/JVN20040004/index.html
- https://flets.com/customer/next/sec/setup/esat_install.html
- https://flets.com/customer/tec/fvc/setup/esat_install.html
- http://jvn.jp/en/jp/JVN20040004/index.html
- https://flets.com/customer/next/sec/setup/esat_install.html
- https://flets.com/customer/tec/fvc/setup/esat_install.html
Products affected by CVE-2018-0563
-
cpe:2.3:a:ntt-east:flet's_virus_clear_easy_setup_&_application_tool:11
-
cpe:2.3:a:ntt-east:flet's_virus_clear_easy_setup_&_application_tool:6.0
-
cpe:2.3:a:ntt-east:flet's_virus_clear_v6_easy_setup_&_application_tool:11
-
cpe:2.3:a:ntt-east:flet's_virus_clear_v6_easy_setup_&_application_tool:6.0