CVE-2018-0580

HOCH 7.8CVE-2018-0580 · Published 14/05/2018 · updated 17/06/2026

Kurz gesagt

CVE-2018-0580 ist eine Schwachstelle (HOCH (CVSS 7.8)) in clip studio action (celsys), clip studio modeler (celsys), clip studio paint (celsys).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.0%, höher als bei 80.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
clip studio action celsys	`≤ 1.5.5`	No fix yet
clip studio modeler celsys	`≤ 1.6.3`	No fix yet
clip studio paint celsys	`≤ 1.7.3`	No fix yet

Description

Untrusted search path vulnerability in CELSYS, Inc CLIP STUDIO series (CLIP STUDIO PAINT (for Windows) EX/PRO/DEBUT Ver.1.7.3 and earlier, CLIP STUDIO ACTION (for Windows) Ver.1.5.5 and earlier, with its timestamp prior to April 25, 2018, 12:11:31, and CLIP STUDIO MODELER (for Windows) Ver.1.6.3 and earlier, with its timestamp prior to April 25, 2018, 17:02:49) allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

References

clipstudio.net/en/dl · Vendor Advisory
jvn.jp/en/jp/JVN68345747 · Third Party Advisory
clip-studio.com/clip_site/download/clipstudioaction/csaupdater/index_win · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free