Description
Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) | Installer of CASL II simulator(self-extract format) | all versions | — |
References
- https://www.jitec.ipa.go.jp/1_20casl2/casl2dl_2017_01.html
- JVN#67305782 third-party-advisory