CVE-2017-2269

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
Tomoki Fuke	FileCapsule Deluxe Portable	Ver.2.0.9 and earlier

References

http://resumenext.blog.fc2.com/blog-entry-30.htmlVendor Advisory
https://jvn.jp/en/jp/JVN42031953/index.htmlThird Party Advisory, VDB Entry
http://resumenext.blog.fc2.com/blog-entry-30.htmlVendor Advisory
https://jvn.jp/en/jp/JVN42031953/index.htmlThird Party Advisory, VDB Entry

Timeline

Published: Jul 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-22707.8Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlie CVE-2017-22717.8Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to CVE-2017-22727.8Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to CVE-2017-22738.8Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remo CVE-2017-22746.1Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers CVE-2017-22757.2WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.CVE-2017-22767.2Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.CVE-2017-22779.1WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage co CVE-2017-22785.9The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 cer CVE-2017-22797.8Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspe CVE-2017-22808.8WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute a CVE-2017-22818.8WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.