CVE-2017-10850
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Una vulnerabilidad de tipo ruta de búsqueda no confiable en los instaladores del controlador ART EX para ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 12 de abril de 2017, 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 12 de abril de 2017, 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 3 de noviembre de 2017, 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 26 de mayo de 2017, 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (la marca de tiempo de la firma de código es anterior al 25 de agosto de 2015, 08:51 UTC.) permite que un atacante consiga privilegios utilizando un archivo DLL troyano en un directorio no especificado.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-07-04 CVE Reserved
- 2017-09-01 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-426: Untrusted Search Path
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://jvn.jp/en/jp/JVN09769017/index.html | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.html | 2021-04-23 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Fujifilm Search vendor "Fujifilm" | Apeosport-vi Search vendor "Fujifilm" for product "Apeosport-vi" | c2271 Search vendor "Fujifilm" for product "Apeosport-vi" and version "c2271" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Apeosport-vi Search vendor "Fujifilm" for product "Apeosport-vi" | c3371 Search vendor "Fujifilm" for product "Apeosport-vi" and version "c3371" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Apeosport-vi Search vendor "Fujifilm" for product "Apeosport-vi" | c4471 Search vendor "Fujifilm" for product "Apeosport-vi" and version "c4471" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Apeosport-vi Search vendor "Fujifilm" for product "Apeosport-vi" | c5571 Search vendor "Fujifilm" for product "Apeosport-vi" and version "c5571" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Apeosport-vi Search vendor "Fujifilm" for product "Apeosport-vi" | c6671 Search vendor "Fujifilm" for product "Apeosport-vi" and version "c6671" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Apeosport-vi Search vendor "Fujifilm" for product "Apeosport-vi" | c7771 Search vendor "Fujifilm" for product "Apeosport-vi" and version "c7771" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Docucentre-vi Search vendor "Fujifilm" for product "Docucentre-vi" | c2271 Search vendor "Fujifilm" for product "Docucentre-vi" and version "c2271" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Docucentre-vi Search vendor "Fujifilm" for product "Docucentre-vi" | c3371 Search vendor "Fujifilm" for product "Docucentre-vi" and version "c3371" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Docucentre-vi Search vendor "Fujifilm" for product "Docucentre-vi" | c4471 Search vendor "Fujifilm" for product "Docucentre-vi" and version "c4471" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Docucentre-vi Search vendor "Fujifilm" for product "Docucentre-vi" | c5571 Search vendor "Fujifilm" for product "Docucentre-vi" and version "c5571" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Docucentre-vi Search vendor "Fujifilm" for product "Docucentre-vi" | c6671 Search vendor "Fujifilm" for product "Docucentre-vi" and version "c6671" | - |
Affected
| ||||||
Fujifilm Search vendor "Fujifilm" | Docucentre-vi Search vendor "Fujifilm" for product "Docucentre-vi" | c7771 Search vendor "Fujifilm" for product "Docucentre-vi" and version "c7771" | - |
Affected
|