Description
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Digital Arts | i-フィルター 6.0 | prior to 6.00.55 | — |
| Digital Arts | i-フィルター for マルチデバイス | prior to 6.00.55 (Windows version only) | — |
| Digital Arts | i-フィルター for ZAQ | prior to 6.00.55 (Windows version only) | — |
| Digital Arts | i-フィルター for ネットカフェ | prior to 6.10.55 | — |
| Digital Arts | i-FILTER ブラウザー&クラウド MultiAgent for Windows | prior to 4.93.R11 | — |
| Fujitsu | FENCE-Mobile RemoteManager i-FILTER Browser Service | prior to 4.93R11 | — |
| OPTiM | Optimal Biz Web Filtering Powered by i-FILTER (Windows version) | prior to 4.93R11 | — |