Tera Term Installer CVE-2017-2193 DLL Loading Remote Code Execution Vulnerability
BID:98807
Info
Tera Term Installer CVE-2017-2193 DLL Loading Remote Code Execution Vulnerability
| Bugtraq ID: | 98807 |
| Class: | Design Error |
| CVE: |
CVE-2017-2193 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 01 2017 12:00AM |
| Updated: | Jun 01 2017 12:00AM |
| Credit: | Eili Masami of Tachibana Lab. |
| Vulnerable: |
TeraTerm Project Tera Term Installer 4.94 |
| Not Vulnerable: | |
Discussion
Tera Term Installer CVE-2017-2193 DLL Loading Remote Code Execution Vulnerability
Tera Term Installer is prone to a remote code-execution vulnerability.
A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application.
Tera Term Installer 4.94 and prior versions are vulnerable.
Tera Term Installer is prone to a remote code-execution vulnerability.
A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application.
Tera Term Installer 4.94 and prior versions are vulnerable.
References
Tera Term Installer CVE-2017-2193 DLL Loading Remote Code Execution Vulnerability
References:
References:
- Exploiting DLL Hijacking Flaws (hdm)
- More information about the DLL Preloading remote attack vector (Microsoft)
- Tera Term Home Page (Tera Term)
- Tera Term installer has vulnerability of DLL loading without intent (Tera Term)
- JVN#06770361: Installer of Tera Term may insecurely load Dynamic Link Libraries (JP-CERT)