CVE-2017-10850

Published: Sep 1, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:04 UTC.), PostScript? Driver + Additional Feature Plug-in + PPD File for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 12 Apr 2017 02:10 UTC.), XPS Print Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 3 Nov 2017 23:48 UTC.), ART EX Direct FAX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 26 May 2017 07:44 UTC.), Setting Restore Tool for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771/C6671/C5571/C4471/C3371/C2271 (Timestamp of code signing is before 25 Aug 2015 08:51 UTC.) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (12)

Products: Fujifilm: Apeosport Vi, Docucentre Vi

Fujifilm

2 products

Apeosport Vi

Docucentre Vi

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fujifilm Apeosport Vi	Version c2271
Fujifilm Apeosport Vi	Version c3371
Fujifilm Apeosport Vi	Version c4471
Fujifilm Apeosport Vi	Version c5571
Fujifilm Apeosport Vi	Version c6671
Fujifilm Apeosport Vi	Version c7771

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Fujifilm Docucentre Vi	Version c2271
Fujifilm Docucentre Vi	Version c3371
Fujifilm Docucentre Vi	Version c4471
Fujifilm Docucentre Vi	Version c5571
Fujifilm Docucentre Vi	Version c6671
Fujifilm Docucentre Vi	Version c7771