PT-2017-9369 · Todokesho · Device Data Encryption Program+3

Yuji Tounai · Published 2017-06-09 · Updated 2017-06-22 · CVE-2016-7818

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Installers for Specification check program versions 9.00 and earlier TODOKESHO print program versions 5.00 and earlier Device data encryption program versions 1.00 and earlier TODOKESHO creation program versions 15.00 and earlier

Description The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability in the affected software.

Recommendations For Installers for Specification check program versions 9.00 and earlier, update to a version released after October 17, 2016. For TODOKESHO print program versions 5.00 and earlier, update to a version released after October 17, 2016. For Device data encryption program versions 1.00 and earlier, update to a version released after October 17, 2016. For TODOKESHO creation program versions 15.00 and earlier, update to a version released after October 17, 2016.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-7818

Affected Products

Device Data Encryption Program

Installers For Specification Check Program

Todokesho Creation Program

Todokesho Print Program

References · 8

• https://osv.dev/vulnerability/CVE-2016-7818 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7818 · Security Note
• http://nenkin.go.jp/denshibenri/setsumei/20150105-03.html · Vendor Advisory
• http://nenkin.go.jp/denshibenri/setsumei/20150415.html#cmscheck · Vendor Advisory
• http://nenkin.go.jp/denshibenri/setsumei/20140630.html · Vendor Advisory
• http://nenkin.go.jp/denshibenri/setsumei/0104.html · Vendor Advisory
• https://jvn.jp/en/jp/JVN08868688/index.html · Note
• http://securityfocus.com/bid/94616 · Note