CVE:CVE-2018-0507
CNNVD:CNNVD-201801-1037
FLET'S VIRUS CLEAR Easy Setup & Application Tool 11和FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool都是日本NIPPON TELEGRAPH AND TELEPHONE WEST公司的病毒清理应用程序的安装配置工具。
FLET'S VIRUS CLEAR Easy Setup & Application Tool 11及之前版本和FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool 11及之前版本中存在不可信的搜索路径漏洞。攻击者可借助目录下的恶意DLL利用该漏洞获取权限。
solution:Upgrade ntt-east flet's_virus_clear_easy_setup_&_application_tool to a higher version than 11,and avoid the version 11; Upgrade ntt-east flet's_virus_clear_v6_easy_setup_&_application_tool to a higher version than 11,and avoid the version 11