CVE-2017-2229
Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-07-07
- Last modified
- 2024-08-05
- Weaknesses
- CWE-426
Affected products
- Kihon Data Sakusei System (Douroshisetu)
- Douroshisetu Kihon Data Sakusei System (National Institute For Land And Infrastructure Management)
References
- http://jvn.jp/en/jp/JVN20409270/index.html
- http://www.nilim-cdrw.jp/
- http://www.nilim-cdrw.jp/index_help.html
