CVE Database
/

CVE-2017-2157

Back to search

CVE-2017-2157

Published: May 12, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

VendorProductVersions

Japan Agency for Local Authority Information Systems

Installer for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)"

affected
Ver3.1 and earlier that was available until April 27, 2017

Japan Agency for Local Authority Information Systems

Installer for The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)"

affected
available until April 27, 2017

Japan Agency for Local Authority Information Systems

Installer for The Public Certification Service for Individuals "The JPKI user's software"

affected
Ver2.6 and earlier that was available until April 27, 2017

References

JVN#39605485
third-party-advisory
x_refsource_JVN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now