CVE-2016-4902

CVE-2016-4902 involves an insecure DLL search path in the installer for The Public Certification Service for Individuals “The JPKI user’s software” (Windows 7+ Ver3.0.1 and earlier; Windows Vista Ver3.0.1 and earlier; Ver2.6 and earlier). The flaw allows arbitrary code execution with the invoking...

CVE-2017-2210

PatchJGD installer (PatchJGD101.EXE, v1.0.1) is affected by an untrusted DLL search path (CWE-427) vulnerability, enabling privilege escalation via a Trojan DLL in an attacker-controlled directory. The issue affects the installer supplied by GSI; attackers could gain the invoking user’s privilege...

CVE-2017-2176

CVE-2017-2176 concerns an untrusted DLL search path in screen saver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe). The underlying issue allows an attacker to gain privileges by placing a Trojan horse D...

CVE-2017-2213

Untrusted search path vulnerability in SemiDynaEXE SemiDynaEXE2008.EXE ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2176

Untrusted search path vulnerability in screensaver installers jasdf01.exe, jasdf02.exe, jasdf03.exe, jasdf04.exe, jasdf05.exe, scramblesetup.exe, clock01setup.exe, clock02setup.exe available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

CVE-2017-2212

CVE-2017-2212 affects TKY2JGD1379.EXE (TKY2JGD version 1.3.79). The untrusted search path vulnerability (CWE-427) in the installer may allow an attacker to gain privileges by placing a malicious DLL in a directory searched by the installer, enabling arbitrary code execution with the caller’s priv...

CVE-2016-7818

Untrusted search path vulnerability in Installers for Specification check program social insurance Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to...

CVE-2016-4902

Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software for Windows 7 and later" Ver3.0.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software for Windows Vista" Ver3.0.1 and earlier and The Public...

CVE-2017-2210

Untrusted search path vulnerability in PatchJGD PatchJGD101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2209

Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 For the first installation The version which was available on the website from 2017 April 4 to 2017 May 18 and ver2.0 and later For the first installation The versions which were available on the websit...

CVE-2017-2212

Untrusted search path vulnerability in TKY2JGD TKY2JGD1379.EXE ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2178

CVE-2017-2178 describes an untrusted search path vulnerability in the Installer of the ATLA (Acquisition, Technology & Logistics Agency) electronic tendering and bid opening system. The root cause is insecure DLL loading (DLL search path issue) that could allow arbitrary code execution via a Troj...

CVE-2017-2214

The CVE-2017-2214 entry corresponds to an untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15. The underlying issue allows an attacker to execute arbitrary code via a specially crafted executable in an unspecified directory. Affected products: AppCheck and A...

CVE-2017-2211

CVE-2017-2211 affects PatchJGD (Hyoko) installer PatchJGDh101.EXE 1.0.1. The issue is an untrusted search path that can lead to Trojan horse DLL loading, allowing privilege elevation. Impact described as arbitrary code execution with user privileges when invoking the installer. The problem is tie...

CVE-2017-2206

CVE-2017-2206 affects SaAT Netizen installer prior to ver.1.2.10.510. The issue is an insecure DLL search path (CWE-427) in the installer, enabling arbitrary code execution with the invoking user’s privileges via a Trojan horse DLL in an unspecified directory. Affected component: installer’s DLL ...

CVE-2017-2189

CVE-2017-2189 affects Sharp RW-4040 driver installer for Windows 7 (version 2.27). The issue is an insecure DLL search path (CWE-427) that may allow arbitrary code execution when a Trojan horse DLL is loaded during installation, granting the attacker the privilege level of the user running the in...

CVE-2017-2190

CVE-2017-2190 affects Sharp RW-4040: untrusted DLL search path in the Windows 7 version 1.2.0.0 tool can allow a Trojan horse DLL to run with the user’s privileges. Root cause is insecure DLL loading (CWE-427) in the DLL search path. Impact described as privilege escalation if a malicious DLL is ...

CVE-2017-2206

Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-7818

CVE-2016-7818 is an Untrusted search path vulnerability in Japan Pension Service installers: Specification check program (social insurance) v9.00 and earlier, TODOKESHO print program v5.00 and earlier, Device data encryption program v1.00 and earlier, and TODOKESHO creation program v15.00 and ear...

CVE-2017-2193

CVE-2017-2193 affects the Tera Term installer (versions 4.94 and earlier). The root cause is an untrusted DLL search path in the installer, enabling a Trojan horse DLL in an unspecified directory to be loaded, which could allow arbitrary code execution with the privileges of the user invoking the...