CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.8
CWE Name:  Improper Input Validation
Summary: untrusted search path vulnerability in hanako 2017, hanako 2016, hanako 2015, hanako pro 3, just office 3 [standard], just office 3 [eco print package], just office 3 & tri-de dataprotect package, just government 3, just jump class 2, just frontier 3, just school 6 premium, hanako police 5, just police 3, hanako 2017 trial version allows remote attackers to gain privileges via a trojan horse dll in an unspecified directory.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2017-04-28
Last Modified Date: 2017-05-12