CVE-2018-0563 Privilege escalation in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions

High 7.8 Published 26 Jun 2018 Updated 5 Aug 2024

An attacker can gain privileges by placing a malicious DLL in a directory searched by the antivirus installer, leading to code execution.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-0563?

CVE-2018-0563 is a high-severity vulnerability in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions, published on 26 Jun 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Weakness: CWE-426

Which versions are affected by CVE-2018-0563?

It affects 2 products.

Products include Ntt-East Flet\'s Virus Clear Easy Setup \& Application Tool, Ntt-East Flet\'s Virus Clear V6 Easy Setup \& Application Tool.

How do I fix CVE-2018-0563?

No fix has been published for CVE-2018-0563 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0563 being exploited?

There is no known exploitation of CVE-2018-0563 in the wild and no public exploit code.

CVE-2018-0507 Privilege escalation in FLET'S VIRUS CLEAR Easy Setup & Application Tool High 7.8

Sources

Also known as GHSA-fjh2-7m7f-v25r.