JVN#18641169: Installer and self-extracting archive containing the installer of TDB CA TypeA use software may insecurely load Dynamic Link Libraries

TDB CA TypeA use software provided by Teikoku Databank, Ltd. is a software which provides environment for using system and management function of TDB electronic authentication service TypeA. The installer and the self-extracting archive containing the installer of TDB CA TypeA use software contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).

Impact

Arbitrary code may be executed with the privilege of the user invoking the installer or the self-extracting archive.

Solution

Use the latest self-extracting archive and invoke the installer carefully
Use the latest self-extracting archive according to the information provided by the developer.
Re-installation of the application is not necessary, because this issue affects the installer only.

Products Affected

• TDB CA TypeA use software version 5.2 and earlier, distributed until 10 August 2017