High severity7.3NVD Advisory· Published May 12, 2017· Updated May 13, 2026
CVE-2017-2157
CVE-2017-2157
Description
Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
4cpe:2.3:a:jpki:the_public_certification_service_for_individuals:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:jpki:the_public_certification_service_for_individuals:*:*:*:*:*:*:*:*range: <=2.6
- cpe:2.3:a:jpki:the_public_certification_service_for_individuals:*:*:*:*:windows_7:*:*:*range: <=3.1
- cpe:2.3:a:jpki:the_public_certification_service_for_individuals:-:*:*:*:windows_vista:*:*:*
- Japan Agency For Local Authority Information Systems/Installer For The Public Certification Service For Individuals "the Jpki User's Software (for Windows 7 And Later)"v5Range: Ver3.1 and earlier that was available until April 27, 2017
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.jpki.go.jp/download/win.htmlnvdPatchVendor Advisory
- jvn.jp/en/jp/JVN39605485/index.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.