CVE-2017-2208

Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-07-07

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Installer Of Electronic Tendering (Acquisition Technology And Logistics Agency)
• Installer Of Electronic Tendering And Bid Opening System (Acquisition Technology Logistics Agency)

References

• http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html
• https://jvn.jp/en/jp/JVN27198823/index.html