CVE-2019-5957

Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2019-05-17

Last modified

2024-08-04

Weaknesses

CWE-426

Affected products

• Installer Of Electronic Reception And Examination Of Application For Radio Licenses Online (Ministry Of Internal Affairs And Communications)
• Electronic Reception And Examination Of Application For Radio Licenses (Soumu)

References

• http://jvn.jp/en/jp/JVN91361851/index.html
• https://www.denpa.soumu.go.jp/public/prog/onlineInstaller_download.html