{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000239.html",
  "dc:date": "2018-03-14T14:25+09:00",
  "dcterms:issued": "2017-11-21T15:40+09:00",
  "dcterms:modified": "2018-03-14T14:25+09:00",
  "description": "Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nEili Masami of Tachibana Lab. and Shun Suzaki reported CVE-2017-10891 vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000239.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:sony:media-go",
      "@product": "Media Go",
      "@vendor": "Sony Video \u0026 Sound Products Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sony:music_center",
      "@product": "Music Center",
      "@vendor": "Sony Video \u0026 Sound Products Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000239",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN08517069/index.html",
      "@id": "JVN#08517069",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/index.html",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10891",
      "@id": "CVE-2017-10891",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10892",
      "@id": "CVE-2017-10892",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-10891",
      "@id": "CVE-2017-10891",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-10892",
      "@id": "CVE-2017-10892",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries"
}