Refine your search

1 vulnerability found for Glary Utilities by Glarysoft Ltd.

jvndb-2018-000070
Vulnerability from jvndb
Published
2018-07-03 13:42
Modified
2019-07-05 17:52
Severity ?
Summary
Installer of Glary Utilities may insecurely load Dynamic Link Libraries
Details
Installer of Glary Utilities provided by Glarysoft Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Eili Masami reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000070.html",
  "dc:date": "2019-07-05T17:52+09:00",
  "dcterms:issued": "2018-07-03T13:42+09:00",
  "dcterms:modified": "2019-07-05T17:52+09:00",
  "description": "Installer of Glary Utilities provided by Glarysoft Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nEili Masami reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000070.html",
  "sec:cpe": {
    "#text": "cpe:/a:glarysoft:glary_utilities",
    "@product": "Glary Utilities",
    "@vendor": "Glarysoft Ltd.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-000070",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN84967039/index.html",
      "@id": "JVN#84967039",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/index.html",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0619",
      "@id": "CVE-2018-0619",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0619",
      "@id": "CVE-2018-0619",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Installer of Glary Utilities may insecurely load Dynamic Link Libraries"
}