CVE-2017-10887

EUVD-2017-2527 · Published Nov 17, 2017

Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Technologies

Microsoft WindowsBookwalker Book Walker

Weaknesses

CWE-426

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth

T1190Exploit Public-Facing Application T1574.007Path Interception by PATH Environment Variable T1574.009Path Interception by Unquoted Path

References

https://bookwalker.jp/info/message20171113_pc_app/
https://jvn.jp/en/jp/JVN18420340/index.html

Potentially impacted assets

See if this affects your attack surface