Description
Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acquisition, Technology & Logistics Agency | Installer of electronic tendering and bid opening system | available prior to June 12, 2017 | — |
References
- http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html
- JVN#27198823 third-party-advisory