CVE-2017-10860

High

Published: 15/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2017-10860 describes an untrusted search path vulnerability in the 'i-filter 6.0 installer', allowing an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Risk Assessment

The organization may be exposed to arbitrary code execution, potentially leading to data loss or system compromise.

Recommendation

It is recommended to update to the latest version of the software and review and restrict permissions on directories where executable files may be run.

Other vulnerabilities in i-filter 6.0 installer

CVE-2017-10859High
CVE-2017-10859 describes an untrusted search path vulnerability in the 'i-filter 6.0 installer', allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. This issue occurs when the code signing timestamp is before August 23, 2017 (JST).

Original NVD description (English source)

Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS