CVE-2017-2209

Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installation) (The version which was available on the website from 2017 April 4 to 2017 May 18) and ver2.0 and later (For the first installation) (The versions which were available on the website prior to 2017 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

• CWE-426

• http://ghg-santeikohyo.env.go.jp/files/system/report_20170526.pdfVendor Advisory
• http://ghg-santeikohyo.env.go.jp/files/system/report_20170529_rev.pdfVendor Advisory
• http://ghg-santeikohyo.env.go.jp/toolVendor Advisory
• https://jvn.jp/en/jp/JVN24087303/index.htmlPatch, Third Party Advisory, VDB Entry
• http://ghg-santeikohyo.env.go.jp/files/system/report_20170526.pdfVendor Advisory
• http://ghg-santeikohyo.env.go.jp/files/system/report_20170529_rev.pdfVendor Advisory
• http://ghg-santeikohyo.env.go.jp/toolVendor Advisory
• https://jvn.jp/en/jp/JVN24087303/index.htmlPatch, Third Party Advisory, VDB Entry

Published

Jun 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2193Untrusted search path vulnerability in the installer of Tera…
• CVE-2017-2194Cross-site scripting vulnerability in Source code security s…
• CVE-2017-2195SQL injection vulnerability in the Multi Feed Reader prior t…
• CVE-2017-2206Untrusted search path vulnerability in the installer of SaAT…
• CVE-2017-2207Untrusted search path vulnerability in the installer of SaAT…
• CVE-2017-2208Untrusted search path vulnerability in Installer of Electron…
• CVE-2017-2210Untrusted search path vulnerability in PatchJGD (PatchJGD101…
• CVE-2017-2211Untrusted search path vulnerability in PatchJGD (Hyoko) (Pat…
• CVE-2017-2212Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.…
• CVE-2017-2213Untrusted search path vulnerability in SemiDynaEXE (SemiDyna…
• CVE-2017-2214Untrusted search path vulnerability in AppCheck and AppCheck…
• CVE-2017-2215Untrusted search path vulnerability in Installer of "Setup f…