Design/Logic Flaw

Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2228

Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2228

Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2228

CVE-2017-2228 describes an untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool, specifically version 4.0. The issue allows a local attacker to gain privileges by placing a Trojan horse DLL in a directory searched by the tool, enabling arbitrary code execution with the user’s ...

CVE-2017-2228: Untrusted Search Path

Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Teikihoukokusho Sakuseishien Tool Untrusted Search Path Vulnerability

Teikihoukokusho Sakuseishien Tool is an automated report timer generation tool from Agency for Natural Resources and Energy of Ministry, Trade and Industry METI, Japan. An untrusted search path vulnerability exists in Teikihoukokusho Sakuseishien Tool version 4.0. A remote attacker can exploit th...

PT-2017-15277

Name of the Vulnerable Software and Affected Versions Teikihoukokusho Sakuseishien Tool version 4.0 Description The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability. Recommendations For Teikihoukokusho...

JVN#53292345: Teikihoukokusho Sakuseishien Tool may insecurely load Dynamic Link Libraries

Teikihoukokusho Sakuseishien Tool provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. The tool is provided as a ZIP archive. It is assumed that a user extracts the tool the...