Untrusted Search Path Vulnerability in DocuWorks by Fuji Xerox

CVE-2017-10849

What is CVE-2017-10849?

An untrusted search path vulnerability exists in Self-extracting documents created by DocuWorks 8.0.7 and earlier versions. This security flaw allows attackers to potentially gain elevated privileges by placing a malicious DLL file in an unspecified directory. If executed, the compromised document may load the unauthorized DLL, leading to possible exploitation and unauthorized access. Users of affected versions are urged to apply necessary updates or mitigations to safeguard against potential intrusions.

References