CVE-2020-5674

U

ntrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:epson:album_print:-:*:*:*:*:update_program:*:*
cpe:2.3:a:epson:color_calibration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:colorbase:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:colorio_easy_print:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:connect:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:creativity_suite:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:e-photo:-:*:*:*:*:camera_raw:*:*
cpe:2.3:a:epson:e-photo:-:*:*:*:*:picture_motion_browser:*:*
cpe:2.3:a:epson:easy_photo_print:-:*:*:*:*:-:*:*
cpe:2.3:a:epson:easy_photo_print:-:*:*:*:*:camera_raw:*:*
cpe:2.3:a:epson:easy_settings:-:*:*:*:*:office:*:*
cpe:2.3:a:epson:imaging_workshop:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:link2:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:multi-print_quicker:-:*:*:*:*:windows:*:*
cpe:2.3:a:epson:net_config:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:net_config_se:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:net_print:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:net_software_development_kit:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:photolier:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:photoquicker:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:photostarter:3.1:*:*:*:*:*:*:*
cpe:2.3:a:epson:pm-t990_integrated_installer:-:*:*:*:*:windows:*:*
cpe:2.3:a:epson:print:-:*:*:*:*:playmemories_home:*:*
cpe:2.3:a:epson:print:-:*:*:*:*:silkypix:*:*
cpe:2.3:a:epson:print:-:*:*:*:*:viewnx:*:*
cpe:2.3:a:epson:print_image_framer_tool:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:print_layout:-:*:*:*:*:photoshop:*:*
cpe:2.3:a:epson:prolab_print:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:prolab_print:-:*:*:*:*:camera_raw:*:*
cpe:2.3:a:epson:remote_printer_driver:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:scan_icm_updater:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:scanner_driver:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:web_to_page:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:webconfig:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:epson:universal_print_driver:-:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:x86:*

Configuration 3 (hide)

AND
OR cpe:2.3:a:epson:status_monitor_2:-:*:*:*:*:*:*:*
cpe:2.3:a:epson:status_monitor_3:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:epson:ec-01_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:epson:ec-01:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:a:epson:print_image_framer_tool:-:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_me:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:34

Type Values Removed Values Added
References () https://jvn.jp/en/jp/JVN26835001/index.html - Third Party Advisory () https://jvn.jp/en/jp/JVN26835001/index.html - Third Party Advisory
References () https://www.epson.jp/support/misc_t/201119_oshirase.htm - Vendor Advisory () https://www.epson.jp/support/misc_t/201119_oshirase.htm - Vendor Advisory
References () https://www.epson.jp/support/pdf/fy20-001_softwareList_20201106_b.pdf - Vendor Advisory () https://www.epson.jp/support/pdf/fy20-001_softwareList_20201106_b.pdf - Vendor Advisory