PT-2017-9369 · Todokesho · Device Data Encryption Program+3

Yuji Tounai · Publicado 2017-06-09 · Atualizado 2017-06-22 · CVE-2016-7818

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Installers for Specification check program versions 9.00 and earlier TODOKESHO print program versions 5.00 and earlier Device data encryption program versions 1.00 and earlier TODOKESHO creation program versions 15.00 and earlier

Description The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability in the affected software.

Recommendations For Installers for Specification check program versions 9.00 and earlier, update to a version released after October 17, 2016. For TODOKESHO print program versions 5.00 and earlier, update to a version released after October 17, 2016. For Device data encryption program versions 1.00 and earlier, update to a version released after October 17, 2016. For TODOKESHO creation program versions 15.00 and earlier, update to a version released after October 17, 2016.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-7818

Produtos afetados

Device Data Encryption Program

Installers For Specification Check Program

Todokesho Creation Program

Todokesho Print Program

Referências · 8

• https://osv.dev/vulnerability/CVE-2016-7818 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7818 · Nota de Segurança
• http://nenkin.go.jp/denshibenri/setsumei/20150105-03.html · Aviso do Fabricante
• https://jvn.jp/en/jp/JVN08868688/index.html · Nota
• http://nenkin.go.jp/denshibenri/setsumei/20150415.html#cmscheck · Aviso do Fabricante
• http://nenkin.go.jp/denshibenri/setsumei/20140630.html · Aviso do Fabricante
• http://securityfocus.com/bid/94616 · Nota
• http://nenkin.go.jp/denshibenri/setsumei/0104.html · Aviso do Fabricante