Untrusted Search Path Vulnerability in Qua Station Connection Tool for Windows
CVE-2017-2289

7.8HIGH

Key Information:

Vendor: Kddi Corporation
Status: Installer Of Qua Station Connection Tool For Windows
Vendor: CVE Published:; 18 August 2017

🔔 Create Kddi Corporation Vulnerability Alert

What is CVE-2017-2289?

The Qua Station Connection Tool for Windows version 1.00.03 contains an untrusted search path vulnerability that could allow an attacker to execute a Trojan horse DLL from an unspecified directory, potentially leading to unauthorized privilege escalation. This vulnerability underscores the importance of securing application installations and validating the integrity of the libraries they load.

Affected Version(s)

Installer of Qua station connection tool for Windows version 1.00.03

References

https://jvn.jp/en/jp/JVN81659403/index.html

third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 18, 2017
Vulnerability Reserved
Dec 1, 2016

CVE-2017-2289 Data

JSON