JVN#01775119: Denshi Nyusatsu Check Tool provided by Ministry of Education, Culture, Sports, Science and Technology may insecurely load Dynamic Link Libraries

Denshi Nyusatsu Check Tool provided by Ministry of Education, Culture, Sports, Science and Technology (MEXT) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).

Impact

Arbitrary code may be executed with the privilege of the user running the application.

Solution

Update the software
Update to the latest version according to the information provided by the developer.
This vulnerability was addressed in Ver1.1.0.0.

Products Affected

• EbidSettingChecker.exe（version 1.0.0.0)