Untrusted search path vulnerability in The electronic authentication system based on the commercial registration system "The CRCA user's Software" Ver1.8 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Link | Tags |
---|---|
https://jvn.jp/en/jp/JVN30866130/index.html | vdb entry third party advisory |
http://www.moj.go.jp/MINJI/minji06_00027.html | patch vendor advisory |