CVE-2016-7818

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.96%

Published

Jun 9, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to October 17, 2016 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Weaknesses (CWE)

CWE-264

Affected Products (4)

japan_pension_service · device_data_encryption_programvulnerable

japan_pension_service · specification_check_programvulnerable

japan_pension_service · todokesho_creation_programvulnerable

japan_pension_service · todokesho_print_programvulnerable

References (12)

http://www.nenkin.go.jp/denshibenri/setsumei/0104.html

PatchVendor Advisory

http://www.nenkin.go.jp/denshibenri/setsumei/20140630.html

PatchVendor Advisory