CVE-2017-2211

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
Geospatial Information Authority of Japan (GSI)	PatchJGD (Hyoko) (PatchJGDh101.EXE)	ver. 1.0.1

References

http://jvn.jp/en/jp/JVN52691241/index.htmlThird Party Advisory, VDB Entry
http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.htmlVendor Advisory
http://jvn.jp/en/jp/JVN52691241/index.htmlThird Party Advisory, VDB Entry
http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.htmlVendor Advisory

Timeline

Published: Jun 9, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-22127.8Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in CVE-2017-22137.8Untrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse CVE-2017-22148.4Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via CVE-2017-22157.8Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (The version which was available o CVE-2017-22166.1Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web scr CVE-2017-22176.1Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web CVE-2017-22187.8Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an CVE-2017-22197.8Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan ho CVE-2017-22207.8Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Troj CVE-2017-22217.8Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan hors CVE-2017-22226.1Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via u CVE-2017-22238.8Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and ea