CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Untrusted Search Path
Summary: untrusted search path vulnerability in installers of art ex driver for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271, docucentre-vi c7771/c6671/c5571/c4471/c3371/c2271 (timestamp of code signing is before 12 apr 2017 02:04 utc.), postscript? driver + additional feature plug-in + ppd file for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271, docucentre-vi c7771/c6671/c5571/c4471/c3371/c2271 (timestamp of code signing is before 12 apr 2017 02:10 utc.), xps print driver for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271, docucentre-vi c7771/c6671/c5571/c4471/c3371/c2271 (timestamp of code signing is before 3 nov 2017 23:48 utc.), art ex direct fax driver for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271, docucentre-vi c7771/c6671/c5571/c4471/c3371/c2271 (timestamp of code signing is before 26 may 2017 07:44 utc.), setting restore tool for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271, docucentre-vi c7771/c6671/c5571/c4471/c3371/c2271 (timestamp of code signing is before 25 aug 2015 08:51 utc.) allows an attacker to gain privileges via a trojan horse dll in an unspecified directory.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-09-01
Last Modified Date: 2017-09-14