Description (CNA)
The installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrative privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ricoh Company, Ltd. / ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール | affected versions prior to Ver.1.3.7 |
CWE
CWE-427
References
- https://support.ricoh.com/bbv2/html/dr_ut_d/ut/history/w/bb/pub_j/dr_ut_d/4101031/4101031555/V137/5260588/260588/history.htm
- https://jvn.jp/en/jp/JVN69531868/
ADP enrichment
No English description supplied.
No references supplied.