CVE-2017-10823

Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Distributed on the website till 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-08-18

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Installer For Shin Kinkyuji Houkoku Data Nyuryoku Program Program Released On 2011 March 10 (Agency For Natural Resources And Energy Of Ministry Of Economytrade And Industry Meti)
• Shin Kinkyuji Houkoku Data Nyuryoku Program (Enecho.meti)

References

• https://jvn.jp/en/jp/JVN23546631/index.html