high7.8
CVE-2017-2154
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST O…
Impact
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Justsystems | Hanako | Versions 2015, 2016, 2017 |
| Justsystems | Hanako Police | Version 5 |
| Justsystems | Hanako Pro | Version 3 |
| Justsystems | Just Frontier | Version 3 |
| Justsystems | Just Government | Version 3 |
| Justsystems | Just Jump Class | Version 2 |
| Justsystems | Just Office | Version 3 |
| Justsystems | Just Police | Version 3 |
| Justsystems | Just School | Version 6 |