CVE-2016-4902 Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certification Service for....
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)" Ver3.0.1 and earlier and The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jpki the public certification service for individuals | <= 2.6 | No fix listed |
| jpki the public certification service for individuals for windows 7 | <= 3.0.1 | No fix listed |
| jpki the public certification service for individuals for windows vista | <= 3.0.1 | No fix listed |
| Japan Agency for Local Authority Information Systems The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" | = Ver3.0.1 and earlier | No fix listed |
| Japan Agency for Local Authority Information Systems The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)" | = Ver3.0.1 and earlier | No fix listed |
| Japan Agency for Local Authority Information Systems The Public Certification Service for Individuals "The JPKI user's software" | = Ver2.6 and earlier | No fix listed |
References
- 94087 third-party-advisory vdb-entry
- JVN#91002412 third-party-advisory vdb-entry