CVE-2016-4902
HighSummary
A vulnerability in the JPKI user's software for individuals allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This affects version 3.0.1 and earlier for Windows 7 and later, as well as Windows Vista, and version 2.6 and earlier.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to data theft or system takeover. Exploitation of this vulnerability by attackers could result in serious security consequences.
Recommendation
It is recommended to update the JPKI software to the latest version to mitigate this vulnerability. Additionally, monitoring and securing directories where external DLLs may be loaded is advised.
Other vulnerabilities in The Public Certification Service for Individuals 'The JPKI user's software'
See all- CVE-2017-10893High
CVE-2017-10893 describes an untrusted search path vulnerability in the JPKI user's software, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-2157High
There is an untrusted search path vulnerability in the installers for JPKI user's software for individuals that allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Original NVD description (English source)
Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)" Ver3.0.1 and earlier and The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.