Vulnerability in Japan Air Self Defense Force, Ministry Of Clock 01 Setup.exe

CVE-2017-2176

Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

EPSS: 0.014 (70.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2017-2176?
CVE-2017-2176 is a high-severity vulnerability in Japan Air Self Defense Force, Ministry Of Clock 01 Setup.exe, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2017-06-09.
How severe is CVE-2017-2176?
High severity. CVSS v3 base score is 7.8 out of 10.