CVE-2017-10848

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
Fuji Xerox Co.,Ltd.	Installer for DocuWorks	8.0.7 and earlier
Fuji Xerox Co.,Ltd.	Installer for DocuWorks Viewer Light	published in Jul 2017 and earlier

References

http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.htmlVendor Advisory
https://jvn.jp/en/jp/JVN09769017/index.htmlThird Party Advisory, VDB Entry
http://www.fujixerox.co.jp/company/news/notice/2017/0831_rectification_work.htmlVendor Advisory
https://jvn.jp/en/jp/JVN09769017/index.htmlThird Party Advisory, VDB Entry

Timeline

Published: Sep 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-108497.8Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileg CVE-2017-10857.8In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only memory region below the CVE-2017-108507.8Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771 CVE-2017-108517.8Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privile CVE-2017-108528.8Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary code via unspecified vectors.CVE-2017-108538.8Buffer overflow in Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.CVE-2017-108548.8Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vector CVE-2017-108557.8Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan hors CVE-2017-108563.7SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failur CVE-2017-108574.3Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" functi CVE-2017-108587.8Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges CVE-2017-108597.8Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to