CVE-2017-2154

Published: Apr 28, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected (15)

Products: Justsystems: Hanako, Hanako Police, Hanako Pro, Just Frontier, Just Government, Just Jump Class, Just Office, Just Police, Just School

9 products

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Justsystems Hanako	Version 2015
Justsystems Hanako	Version 2016
Justsystems Hanako	Version 2017
Justsystems Hanako	Version 2017
Justsystems Hanako Police	Version 5
Justsystems Hanako Pro	Version 3
Justsystems Just Frontier	Version 3
Justsystems Just Government	Version 3
Justsystems Just Jump Class	Version 2
Justsystems Just Office	Version 3
Justsystems Just Office	Version 3
Justsystems Just Office	Version 3
Justsystems Just Police	Version 3
Justsystems Just School	Version 6
Justsystems Just School	Version 6