Lucene search

K
cvelistJpcertCVELIST:CVE-2017-2157
HistoryMay 12, 2017 - 6:00 p.m.

CVE-2017-2157

2017-05-1218:00:00
jpcert
www.cve.org
1

0.002 Low

EPSS

Percentile

53.2%

Untrusted search path vulnerability in installers for The Public Certification Service for Individuals β€œThe JPKI user’s software (for Windows 7 and later)” Ver3.1 and earlier, The Public Certification Service for Individuals β€œThe JPKI user’s software (for Windows Vista)”, The Public Certification Service for Individuals β€œThe JPKI user’s software” Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

CNA Affected

[
  {
    "product": "Installer for The Public Certification Service for Individuals \"The JPKI user's software (for Windows 7 and later)\"",
    "vendor": "Japan Agency for Local Authority Information Systems",
    "versions": [
      {
        "status": "affected",
        "version": "Ver3.1 and earlier that was available until April 27, 2017"
      }
    ]
  },
  {
    "product": "Installer for The Public Certification Service for Individuals \"The JPKI user's software (for Windows Vista)\"",
    "vendor": "Japan Agency for Local Authority Information Systems",
    "versions": [
      {
        "status": "affected",
        "version": "available until April 27, 2017"
      }
    ]
  },
  {
    "product": "Installer for The Public Certification Service for Individuals \"The JPKI user's software\"",
    "vendor": "Japan Agency for Local Authority Information Systems",
    "versions": [
      {
        "status": "affected",
        "version": "Ver2.6 and earlier that was available until April 27, 2017"
      }
    ]
  }
]

0.002 Low

EPSS

Percentile

53.2%

Related for CVELIST:CVE-2017-2157