high7.8
CVE-2020-5674
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspe…
Impact
Untrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epson | Album Print | All versions |
| Epson | Color Calibration Utility | All versions |
| Epson | Colorbase | All versions |
| Epson | Colorio Easy Print | All versions |
| Epson | Connect | All versions |
| Epson | Creativity Suite | All versions |
| Epson | E-Photo | All versions |
| Epson | Easy Photo Print | All versions |
| Epson | Easy Settings | All versions |
| Epson | Imaging Workshop | All versions |
| Epson | Link2 | All versions |
| Epson | Multi-Print Quicker | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/jp/JVN26835001/index.html
- https://www.epson.jp/support/misc_t/201119_oshirase.htm
- https://www.epson.jp/support/pdf/fy20-001_softwareList_20201106_b.pdf
- https://jvn.jp/en/jp/JVN26835001/index.html
- https://www.epson.jp/support/misc_t/201119_oshirase.htm
- https://www.epson.jp/support/pdf/fy20-001_softwareList_20201106_b.pdf