ByteOS Network

NVD Vulnerability Details :

CVE-2017-2154

Deferred

Source-vultures@jpcert.or.jp

Published At-28 Apr, 2017 | 16:59

Updated At-20 Apr, 2025 | 01:37

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

justsystems>>hanako>>2015

cpe:2.3:a:justsystems:hanako:2015:*:*:*:*:*:*:*

justsystems>>hanako>>2016

cpe:2.3:a:justsystems:hanako:2016:*:*:*:*:*:*:*

justsystems>>hanako>>2017

cpe:2.3:a:justsystems:hanako:2017:*:*:*:*:*:*:*

justsystems>>hanako>>2017

cpe:2.3:a:justsystems:hanako:2017:*:*:*:trial_version:*:*:*

justsystems>>hanako_police>>5

cpe:2.3:a:justsystems:hanako_police:5:*:*:*:*:*:*:*

justsystems>>hanako_pro>>3

cpe:2.3:a:justsystems:hanako_pro:3:*:*:*:*:*:*:*

justsystems>>just_frontier>>3

cpe:2.3:a:justsystems:just_frontier:3:*:*:*:*:*:*:*

justsystems>>just_government>>3

cpe:2.3:a:justsystems:just_government:3:*:*:*:*:*:*:*

justsystems>>just_jump_class>>2

cpe:2.3:a:justsystems:just_jump_class:2:*:*:*:*:*:*:*

justsystems>>just_office>>3

cpe:2.3:a:justsystems:just_office:3:*:*:*:eco_print_pack:*:*:*

justsystems>>just_office>>3

cpe:2.3:a:justsystems:just_office:3:*:*:*:standard:*:*:*

justsystems>>just_office>>3

cpe:2.3:a:justsystems:just_office:3:*:*:*:tri-de_dataprotect_pack:*:*:*

justsystems>>just_police>>3

cpe:2.3:a:justsystems:just_police:3:*:*:*:*:*:*:*

justsystems>>just_school>>6

cpe:2.3:a:justsystems:just_school:6:*:*:*:*:*:*:*

justsystems>>just_school>>6

cpe:2.3:a:justsystems:just_school:6:*:*:*:premium:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://jvn.jp/en/jp/JVN54268888/index.html	vultures@jpcert.or.jp	Third Party Advisory VDB Entry
https://www.justsystems.com/jp/info/js17002.html	vultures@jpcert.or.jp	Vendor Advisory
https://jvn.jp/en/jp/JVN54268888/index.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://www.justsystems.com/jp/info/js17002.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History