EUVD-2017-11394

Malware in sbrugna...

EUVD-2017-11393

Malware in sbrugna...

PatchJGD (Hyoko) Installer Untrusted Search Path Vulnerability

PatchJGD Hyoko is a coordinate exchange software package released by the Japan Geographic Institute GSI. An untrusted search path vulnerability exists in the installer PatchJGDh101.EXE of PatchJGD Hyoko version 1.0.1. The vulnerability can be exploited to gain privileges via a malicious DLL in th...

CVE-2017-2210

Untrusted search path vulnerability in PatchJGD PatchJGD101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2211

Untrusted search path vulnerability in PatchJGD Hyoko PatchJGDh101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2211

Untrusted search path vulnerability in PatchJGD Hyoko PatchJGDh101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in PatchJGD Hyoko PatchJGDh101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2211

CVE-2017-2211 affects PatchJGD (Hyoko) installer PatchJGDh101.EXE 1.0.1. The issue is an untrusted search path that can lead to Trojan horse DLL loading, allowing privilege elevation. Impact described as arbitrary code execution with user privileges when invoking the installer. The problem is tie...

CVE-2017-2210

PatchJGD installer (PatchJGD101.EXE, v1.0.1) is affected by an untrusted DLL search path (CWE-427) vulnerability, enabling privilege escalation via a Trojan DLL in an attacker-controlled directory. The issue affects the installer supplied by GSI; attackers could gain the invoking user’s privilege...

CVE-2017-2211

Untrusted search path vulnerability in PatchJGD Hyoko PatchJGDh101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2210

Untrusted search path vulnerability in PatchJGD PatchJGD101.EXE ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The installer of PatchJGD provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries

Overview The installer of PatchJGD PatchJGD101.EXE provided by Geospatial Information Authority of Japan GSI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...