CVE-2017-10823

CVE-2017-10823 affects the Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program (released 2011-03-10; distributed until 2017-05-17). The root cause is an insecure DLL search path (CWE-427) that may allow a Trojan DLL to be loaded, enabling arbitrary code execution with the user’s privileges. ...