CVE-2017-2157
HighSummary
There is an untrusted search path vulnerability in the installers for JPKI user's software for individuals that allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update the software to the latest version and verify installation paths to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in The Public Certification Service for Individuals 'The JPKI user's software' versions 2.6 and earlier, and versions for Windows Vista and Windows 7 and later.
See all- CVE-2017-10893High
CVE-2017-10893 describes an untrusted search path vulnerability in the JPKI user's software, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-4902High
A vulnerability in the JPKI user's software for individuals allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This affects version 3.0.1 and earlier for Windows 7 and later, as well as Windows Vista, and version 2.6 and earlier.
Original NVD description (English source)
Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.