CVE-2020-5674
Summary
| CVE | CVE-2020-5674 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-11-24 07:15:00 UTC |
| Updated | 2021-07-21 11:39:00 UTC |
| Description | Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
Risk And Classification
Problem Types: CWE-427
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Epson | Album Print | - | All | All | All |
| Application | Epson | Album Print | - | All | All | All |
| Application | Epson | Colorbase | - | All | All | All |
| Application | Epson | Colorbase | - | All | All | All |
| Application | Epson | Colorio Easy Print | - | All | All | All |
| Application | Epson | Colorio Easy Print | - | All | All | All |
| Application | Epson | Color Calibration Utility | - | All | All | All |
| Application | Epson | Color Calibration Utility | - | All | All | All |
| Application | Epson | Connect | - | All | All | All |
| Application | Epson | Connect | - | All | All | All |
| Application | Epson | Creativity Suite | - | All | All | All |
| Application | Epson | Creativity Suite | - | All | All | All |
| Application | Epson | E-photo | - | All | All | All |
| Application | Epson | E-photo | - | All | All | All |
| Application | Epson | E-photo | - | All | All | All |
| Application | Epson | E-photo | - | All | All | All |
| Application | Epson | Easy Photo Print | - | All | All | All |
| Application | Epson | Easy Photo Print | - | All | All | All |
| Application | Epson | Easy Photo Print | - | All | All | All |
| Application | Epson | Easy Photo Print | - | All | All | All |
| Application | Epson | Easy Settings | - | All | All | All |
| Application | Epson | Easy Settings | - | All | All | All |
| Hardware | Epson | Ec-01 | - | All | All | All |
| Hardware | Epson | Ec-01 | - | All | All | All |
| Operating System | Epson | Ec-01 Firmware | - | All | All | All |
| Operating System | Epson | Ec-01 Firmware | - | All | All | All |
| Application | Epson | Imaging Workshop | - | All | All | All |
| Application | Epson | Imaging Workshop | - | All | All | All |
| Application | Epson | Link2 | - | All | All | All |
| Application | Epson | Link2 | - | All | All | All |
| Application | Epson | Multi-print Quicker | - | All | All | All |
| Application | Epson | Multi-print Quicker | - | All | All | All |
| Application | Epson | Net Config | - | All | All | All |
| Application | Epson | Net Config | - | All | All | All |
| Application | Epson | Net Config Se | - | All | All | All |
| Application | Epson | Net Config Se | - | All | All | All |
| Application | Epson | Net Print | - | All | All | All |
| Application | Epson | Net Print | - | All | All | All |
| Application | Epson | Net Software Development Kit | - | All | All | All |
| Application | Epson | Net Software Development Kit | - | All | All | All |
| Application | Epson | Photolier | - | All | All | All |
| Application | Epson | Photolier | - | All | All | All |
| Application | Epson | Photoquicker | - | All | All | All |
| Application | Epson | Photoquicker | - | All | All | All |
| Application | Epson | Photostarter | 3.1 | All | All | All |
| Application | Epson | Photostarter | 3.1 | All | All | All |
| Application | Epson | Pm-t990 Integrated Installer | - | All | All | All |
| Application | Epson | Pm-t990 Integrated Installer | - | All | All | All |
| Application | Epson | - | All | All | All | |
| Application | Epson | - | All | All | All | |
| Application | Epson | - | All | All | All | |
| Application | Epson | - | All | All | All | |
| Application | Epson | - | All | All | All | |
| Application | Epson | - | All | All | All | |
| Application | Epson | Print Image Framer Tool | - | All | All | All |
| Application | Epson | Print Image Framer Tool | - | All | All | All |
| Application | Epson | Print Layout | - | All | All | All |
| Application | Epson | Print Layout | - | All | All | All |
| Application | Epson | Prolab Print | - | All | All | All |
| Application | Epson | Prolab Print | - | All | All | All |
| Application | Epson | Prolab Print | - | All | All | All |
| Application | Epson | Prolab Print | - | All | All | All |
| Application | Epson | Remote Printer Driver | - | All | All | All |
| Application | Epson | Remote Printer Driver | - | All | All | All |
| Application | Epson | Scanner Driver | - | All | All | All |
| Application | Epson | Scanner Driver | - | All | All | All |
| Application | Epson | Scan Icm Updater | - | All | All | All |
| Application | Epson | Scan Icm Updater | - | All | All | All |
| Application | Epson | Status Monitor 2 | - | All | All | All |
| Application | Epson | Status Monitor 2 | - | All | All | All |
| Application | Epson | Status Monitor 3 | - | All | All | All |
| Application | Epson | Status Monitor 3 | - | All | All | All |
| Application | Epson | Universal Print Driver | - | All | All | All |
| Application | Epson | Universal Print Driver | - | All | All | All |
| Application | Epson | Webconfig | - | All | All | All |
| Application | Epson | Webconfig | - | All | All | All |
| Application | Epson | Web To Page | - | All | All | All |
| Application | Epson | Web To Page | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows 98 | - | All | All | All |
| Operating System | Microsoft | Windows 98 | - | All | All | All |
| Operating System | Microsoft | Windows Me | - | All | All | All |
| Operating System | Microsoft | Windows Me | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| エプソン製ソフトウェアのDLL読み込みに関する脆弱性について | MISC | www.epson.jp | Vendor Advisory |
| JVN#26835001: The installers of multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries | MISC | jvn.jp | Third Party Advisory |
| www.epson.jp/support/pdf/fy20-001_softwareList_20201106_b.pdf | MISC | www.epson.jp | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.