← Back

CVE-2016-7818

nvd nist
Published: Jun 9, 2017Modified: May 13, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to October 17, 2016 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (4)

Japan Pension Service
4 products
Device Data Encryption Program
Specification Check Program
Todokesho Creation Program
Todokesho Print Program
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Device Data Encryption Program
Version 1.00
Specification Check Program
Version 9.00
Todokesho Creation Program
Version 15.00
Todokesho Print Program
Version 5.00

Related CWEs

CWE-264
CWE-264

References (12)

Source: vultures@jpcert.or.jp
PatchVendor Advisory
Source: vultures@jpcert.or.jp
PatchVendor Advisory
Source: vultures@jpcert.or.jp
PatchVendor Advisory
Source: vultures@jpcert.or.jp
PatchVendor Advisory
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.