Untrusted Search Path Vulnerability in DocuWorks by Fuji Xerox

CVE-2017-10848

What is CVE-2017-10848?

The vulnerability involves an untrusted search path in the installers for DocuWorks and DocuWorks Viewer Light, which allows attackers to execute malicious code by placing a Trojan horse DLL in an undisclosed directory. This flaw can serve as a vector for privilege escalation, enabling attackers to gain unauthorized access to system resources, potentially compromising the integrity of the affected systems.

References