Untrusted search path vulnerability in The Public Certification Service for Individuals “The JPKI user’s software” Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10893
Reference (s):
- JVN:JVN#30352845
- URL: https://jvn.jp/en/jp/JVN30352845/index.html