CVE-2017-2154 Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUS...
HighCVSS 7.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| justsystems hanako | = 2015 | No fix listed |
| justsystems hanako | = 2016 | No fix listed |
| justsystems hanako | = 2017 | No fix listed |
| justsystems hanako police | = 5 | No fix listed |
| justsystems hanako pro | = 3 | No fix listed |
| justsystems just frontier | = 3 | No fix listed |
| justsystems just government | = 3 | No fix listed |
| justsystems just jump class | = 2 | No fix listed |
| justsystems just office | = 3 | No fix listed |
| justsystems just police | = 3 | No fix listed |
| justsystems just school | = 6 | No fix listed |
References
- JVN#54268888 third-party-advisory vdb-entry
- www.justsystems.com vendor-advisory