Screensaver Installers CVE-2017-2176 DLL Loading Remote Code Execution Vulnerability

Bugtraq ID:	98823
Class:	Design Error
CVE:	CVE-2017-2176
Remote:	Yes
Local:	No
Published:	Jun 05 2017 12:00AM
Updated:	Jun 05 2017 12:00AM
Credit:	Eili Masami of Tachibana Lab.
Vulnerable:	JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE scramble_setup 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE jasdf_05 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE jasdf_04 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE jasdf_03 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE jasdf_02 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE jasdf_01 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE clock_02_setup 0 JAPAN AIR SELF DEFENSE FORCE MINISTRY OF DEFENSE clock_01_setup 0
Not Vulnerable:

Screensaver Installers CVE-2017-2176 DLL Loading Remote Code Execution Vulnerability

Screensaver Installers is prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code in the context of the affected application.

Screensaver Installers CVE-2017-2176 DLL Loading Remote Code Execution Vulnerability

Attackers must trick a user into opening a file on a remote WebDAV or SMB share to exploit this issue.

A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.

Screensaver Installers CVE-2017-2176 DLL Loading Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Screensaver Installers CVE-2017-2176 DLL Loading Remote Code Execution Vulnerability

References:

• Acquisition, Technology & Logistics Agency Homepage (Mod.Go)
  
• Exploiting DLL Hijacking Flaws (hdm)
  
• JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE Homepage (Mod.Go)
  
• More information about the DLL Preloading remote attack vector (Microsoft)
  
• JVN#41185163 Installers of the screensavers provided by JAPAN AIR SELF DEFENSE F (JPCERT)
  
• Vulnerability concerning DLL * reading in screen saver installer (Mod.Go)