PrimeDrive Desktop Application Installer DLL Loading Remote Code Execution Vulnerability

Bugtraq ID:	98420
Class:	Design Error
CVE:	CVE-2017-2167
Remote:	Yes
Local:	No
Published:	May 12 2017 12:00AM
Updated:	May 12 2017 12:00AM
Credit:	Eili Masami of Tachibana Lab. and Eiji James Yoshida of Security Professionals Network Inc
Vulnerable:	SoftBank PrimeDrive Desktop Application 1.4.3 SoftBank PrimeDrive Desktop Application 1.4.4
Not Vulnerable:

PrimeDrive Desktop Application Installer DLL Loading Remote Code Execution Vulnerability

PrimeDrive Desktop Application Installer is prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application.

PrimeDrive Desktop Application version 1.4.4 and prior are vulnerable.

PrimeDrive Desktop Application Installer DLL Loading Remote Code Execution Vulnerability

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.

A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

PrimeDrive Desktop Application Installer DLL Loading Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PrimeDrive Desktop Application Installer DLL Loading Remote Code Execution Vulnerability

References:

• Exploiting DLL Hijacking Flaws (hdm)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• JVN#16248227 PrimeDrive Desktop Application Installer may insecurely load execut (JPCERT)
  
• Softbank Homepage (Softbank)