Takashi Yoshikawa

Existe uma falha de encadeamento de privilégios no instalador do software e-Tax, permitindo que uma DLL maliciosa preparada por um invasor seja executada com privilégios superiores aos do aplicativo.

The issue is related to an untrusted search path vulnerability, which allows an attacker to gain privileges. This can be achieved via a Trojan horse DLL in an unspecified directory. The vulnerability is also described as being related to incorrect path search handling, potentially allowing a remote attacker to elevate privileges and execute arbitrary code using a specially crafted file.

The issue is related to an untrusted search path vulnerability in the installer. This allows an attacker to gain privileges by using a Trojan horse DLL in an unspecified directory.

The issue is related to an untrusted search path vulnerability in the installer. This could allow an attacker to gain privileges by using a Trojan horse DLL in an unspecified directory.

The issue concerns an untrusted search path vulnerability that allows an attacker to gain privileges. This can be achieved by using a Trojan horse DLL in an unspecified directory.

The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability.

The issue allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory due to an untrusted search path vulnerability.

The issue is related to an untrusted search path vulnerability in the Installer of the "Setup file of advance preparation". This vulnerability allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

The issue is related to an untrusted search path vulnerability in the Installer component. This vulnerability allows an attacker to gain privileges by using a Trojan horse DLL in an unspecified directory.

The issue allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory. This is due to an untrusted search path vulnerability.

The issue allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory. This is due to an untrusted search path vulnerability.

The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability.

The issue allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability in the installers for the affected software.

The issue is related to an untrusted search path vulnerability in the installer.

The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability.

The issue is related to an untrusted search path vulnerability in python.exe on Windows, allowing local users to gain privileges via a Trojan horse readline.pyd file in the current working directory.

The issue is related to an untrusted search path vulnerability in the LoadLibrary function in the kernel. This vulnerability allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. An elevation of privilege vulnerability exists when the LoadLibrary function fails to properly validate user input. An authenticated attacker who successfully exploits this vulnerability could elevate privileges on a targeted system, then install programs, view, change, or delete data, or create new accounts with full administrative rights.