Description (CNA)
Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| National Tax Agency / The installer of e-Tax software(common program) | affected All versions distributed on the NTA website before 2024 September 24 |
CWE
CWE-268
References
- https://www.e-tax.nta.go.jp/topics/2024/topics_20240924_versionup.htm
- https://jvn.jp/en/jp/JVN57749899/
ADP enrichment
No English description supplied.
No references supplied.