CVE-2017-2176

Summary

Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected Software

VendorProductVersion RangeStatus
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEjasdf_01.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEjasdf_02.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEjasdf_03.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEjasdf_04.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEjasdf_05.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEscramble_setup.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEclock_01_setup.exeavailable prior to May 25, 2017affected
JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSEclock_02_setup.exeavailable prior to May 25, 2017affected

Weaknesses

  • Untrusted search path vulnerability

ADP Enrichment

CVE Program Container

Additional References

References