First published: Tue Jun 26 2018(Updated: )
Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
Ntt-east Flet\'s Virus Clear Easy Setup \& Application Tool | <=13.0 | |
Ntt-east Flet\'s Virus Clear V6 Easy Setup \& Application Tool | <=13.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0563 is an untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool, allowing an attacker to gain privileges via a Trojan horse DLL.
CVE-2018-0563 has a severity rating of critical (CVSS score: 7.8).
CVE-2018-0563 affects FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions, as well as FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions.
An attacker can exploit CVE-2018-0563 by using a Trojan horse DLL in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool.
Yes, you can find references for CVE-2018-0563 at the following links: [1](http://jvn.jp/en/jp/JVN20040004/index.html), [2](https://flets.com/customer/next/sec/setup/esat_install.html), [3](https://flets.com/customer/tec/fvc/setup/esat_install.html).