CVE-2017-10859
HighSummary
CVE-2017-10859 describes an untrusted search path vulnerability in the 'i-filter 6.0 installer', allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This issue occurs when the code signing timestamp is before August 23, 2017 (JST).
Risk Assessment
The organization may be exposed to attacks that exploit this vulnerability to gain unauthorized access and escalate privileges. This could lead to serious security breaches and data loss.
Recommendation
It is recommended to update the 'i-filter 6.0 installer' to the latest version to mitigate this vulnerability. A system audit should also be conducted to detect any potential malicious DLL files.
Other vulnerabilities in i-filter 6.0 installer
Original NVD description (English source)
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

