Vulnerability Details CVE-2018-0580
Untrusted search path vulnerability in CELSYS, Inc CLIP STUDIO series (CLIP STUDIO PAINT (for Windows) EX/PRO/DEBUT Ver.1.7.3 and earlier, CLIP STUDIO ACTION (for Windows) Ver.1.5.5 and earlier, with its timestamp prior to April 25, 2018, 12:11:31, and CLIP STUDIO MODELER (for Windows) Ver.1.6.3 and earlier, with its timestamp prior to April 25, 2018, 17:02:49) allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
- http://www.clipstudio.net/en/dl
- https://jvn.jp/en/jp/JVN68345747/
- https://www.clip-studio.com/clip_site/download/clipstudioaction/csaupdater/index_win
- http://www.clipstudio.net/en/dl
- https://jvn.jp/en/jp/JVN68345747/
- https://www.clip-studio.com/clip_site/download/clipstudioaction/csaupdater/index_win
Products affected by CVE-2018-0580
-
cpe:2.3:a:celsys:clip_studio_action:1.5.5
-
cpe:2.3:a:celsys:clip_studio_modeler:1.6.3
-
cpe:2.3:a:celsys:clip_studio_paint:1.7.3