Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2019-5913 (GCVE-0-2019-5913)

Vulnerability from nvd – Published: 2019-02-13 18:00 – Updated: 2024-08-04 20:09

Summary

Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC
http://jvn.jp/en/jp/JVN83826673/index.html	third-party-advisoryx_refsource_JVN

Impacted products

1 product

Vendor	Product	Version
Micco	The installer of LHMelting	Affected: (LHMelting for Win32 Ver 1.65.3.6 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:23.745Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          },
          {
            "name": "JVN#83826673",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "The installer of LHMelting",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(LHMelting for Win32 Ver 1.65.3.6 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        },
        {
          "name": "JVN#83826673",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-5913",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "The installer of LHMelting",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(LHMelting for Win32 Ver 1.65.3.6 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            },
            {
              "name": "JVN#83826673",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-5913",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2019-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:09:23.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5912 (GCVE-0-2019-5912)

Vulnerability from nvd – Published: 2019-02-13 18:00 – Updated: 2024-08-04 20:09

Summary

Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC
http://jvn.jp/en/jp/JVN83826673/index.html	third-party-advisoryx_refsource_JVN

Impacted products

1 product

Vendor	Product	Version
Micco	The installer of UNARJ32.DLL	Affected: (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:23.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          },
          {
            "name": "JVN#83826673",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "The installer of UNARJ32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        },
        {
          "name": "JVN#83826673",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-5912",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "The installer of UNARJ32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            },
            {
              "name": "JVN#83826673",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-5912",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2019-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:09:23.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5911 (GCVE-0-2019-5911)

Vulnerability from nvd – Published: 2019-02-13 18:00 – Updated: 2024-08-04 20:09

Summary

Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC
http://jvn.jp/en/jp/JVN83826673/index.html	third-party-advisoryx_refsource_JVN

Impacted products

1 product

Vendor	Product	Version
Micco	The installer of UNLHA32.DLL	Affected: (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:23.769Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          },
          {
            "name": "JVN#83826673",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "The installer of UNLHA32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        },
        {
          "name": "JVN#83826673",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-5911",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "The installer of UNLHA32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            },
            {
              "name": "JVN#83826673",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-5911",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2019-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:09:23.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16190 (GCVE-0-2018-16190)

Vulnerability from nvd – Published: 2019-02-13 18:00 – Updated: 2024-08-05 10:17

Summary

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

5 references

URL	Tags
http://jvn.jp/en/jp/JVN52168232/index.html	third-party-advisoryx_refsource_JVN
http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm	x_refsource_MISC
https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm	x_refsource_MISC
http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm	x_refsource_MISC
http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Micco	UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL	Affected: (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:17:38.400Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#52168232",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "UNARJ32.DLL for Win32,  LHMelting for Win32, and  LMLzh32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVN#52168232",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2018-16190",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "UNARJ32.DLL for Win32,  LHMelting for Win32, and  LMLzh32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#52168232",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm"
            },
            {
              "name": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm",
              "refsource": "MISC",
              "url": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2018-16190",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2018-08-30T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:17:38.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16189 (GCVE-0-2018-16189)

Vulnerability from nvd – Published: 2019-02-13 18:00 – Updated: 2024-08-05 10:17

Summary

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://jvn.jp/en/jp/JVN52168232/index.html	third-party-advisoryx_refsource_JVN
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Micco	Self-Extracting Archives created by UNLHA32.DLL	Affected: prior to Ver 3.00

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:17:38.404Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#52168232",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Self-Extracting Archives created by UNLHA32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver 3.00"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVN#52168232",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2018-16189",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Self-Extracting Archives created by UNLHA32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to Ver 3.00"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#52168232",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2018-16189",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2018-08-30T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:17:38.404Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5911 (GCVE-0-2019-5911)

Vulnerability from cvelistv5 – Published: 2019-02-13 18:00 – Updated: 2024-08-04 20:09

Summary

Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC
http://jvn.jp/en/jp/JVN83826673/index.html	third-party-advisoryx_refsource_JVN

Impacted products

1 product

Vendor	Product	Version
Micco	The installer of UNLHA32.DLL	Affected: (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:23.769Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          },
          {
            "name": "JVN#83826673",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "The installer of UNLHA32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        },
        {
          "name": "JVN#83826673",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-5911",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "The installer of UNLHA32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in the installer of UNLHA32.DLL (UNLHA32.DLL for Win32 Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            },
            {
              "name": "JVN#83826673",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-5911",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2019-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:09:23.769Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16189 (GCVE-0-2018-16189)

Vulnerability from cvelistv5 – Published: 2019-02-13 18:00 – Updated: 2024-08-05 10:17

Summary

Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://jvn.jp/en/jp/JVN52168232/index.html	third-party-advisoryx_refsource_JVN
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Micco	Self-Extracting Archives created by UNLHA32.DLL	Affected: prior to Ver 3.00

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:17:38.404Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#52168232",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Self-Extracting Archives created by UNLHA32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "prior to Ver 3.00"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVN#52168232",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2018-16189",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Self-Extracting Archives created by UNLHA32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "prior to Ver 3.00"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in Self-Extracting Archives created by UNLHA32.DLL prior to Ver 3.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#52168232",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2018-16189",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2018-08-30T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:17:38.404Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5913 (GCVE-0-2019-5913)

Vulnerability from cvelistv5 – Published: 2019-02-13 18:00 – Updated: 2024-08-04 20:09

Summary

Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC
http://jvn.jp/en/jp/JVN83826673/index.html	third-party-advisoryx_refsource_JVN

Impacted products

1 product

Vendor	Product	Version
Micco	The installer of LHMelting	Affected: (LHMelting for Win32 Ver 1.65.3.6 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:23.745Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          },
          {
            "name": "JVN#83826673",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "The installer of LHMelting",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(LHMelting for Win32 Ver 1.65.3.6 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        },
        {
          "name": "JVN#83826673",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-5913",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "The installer of LHMelting",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(LHMelting for Win32 Ver 1.65.3.6 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in the installer of LHMelting (LHMelting for Win32 Ver 1.65.3.6 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            },
            {
              "name": "JVN#83826673",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-5913",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2019-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:09:23.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16190 (GCVE-0-2018-16190)

Vulnerability from cvelistv5 – Published: 2019-02-13 18:00 – Updated: 2024-08-05 10:17

Summary

Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

5 references

URL	Tags
http://jvn.jp/en/jp/JVN52168232/index.html	third-party-advisoryx_refsource_JVN
http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm	x_refsource_MISC
https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm	x_refsource_MISC
http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm	x_refsource_MISC
http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Micco	UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL	Affected: (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:17:38.400Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#52168232",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "UNARJ32.DLL for Win32,  LHMelting for Win32, and  LMLzh32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVN#52168232",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2018-16190",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "UNARJ32.DLL for Win32,  LHMelting for Win32, and  LMLzh32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in UNARJ32.DLL for Win32, LHMelting for Win32, and LMLzh32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier, LHMelting for Win32 Ver 1.65.3.6 and earlier, LMLzh32.DLL Ver 2.67.1.2 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#52168232",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN52168232/index.html"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_04.htm"
            },
            {
              "name": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm",
              "refsource": "MISC",
              "url": "https://micco.mars.jp/vul/2017/mhsvi20170515_03.htm"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_05.htm"
            },
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_02.htm"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2018-16190",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2018-08-30T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:17:38.400Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-5912 (GCVE-0-2019-5912)

Vulnerability from cvelistv5 – Published: 2019-02-13 18:00 – Updated: 2024-08-04 20:09

Summary

Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Severity

No CVSS data available.

CWE

Untrusted search path vulnerability

Assigner

jpcert jpcert root Scorecard

References

2 references

URL	Tags
http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm	x_refsource_MISC
http://jvn.jp/en/jp/JVN83826673/index.html	third-party-advisoryx_refsource_JVN

Impacted products

1 product

Vendor	Product	Version
Micco	The installer of UNARJ32.DLL	Affected: (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier)

Date Public

2019-02-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T20:09:23.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
          },
          {
            "name": "JVN#83826673",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "The installer of UNARJ32.DLL",
          "vendor": "Micco",
          "versions": [
            {
              "status": "affected",
              "version": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier)"
            }
          ]
        }
      ],
      "datePublic": "2019-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Untrusted search path vulnerability",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-02-13T17:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
        },
        {
          "name": "JVN#83826673",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2019-5912",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "The installer of UNARJ32.DLL",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Untrusted search path vulnerability in the installer of UNARJ32.DLL (UNARJ32.DLL for Win32 Ver 1.10.1.25 and earlier) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Untrusted search path vulnerability"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm",
              "refsource": "MISC",
              "url": "http://micco.mars.jp/vul/2017/mhsvi20170515_01.htm"
            },
            {
              "name": "JVN#83826673",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN83826673/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2019-5912",
    "datePublished": "2019-02-13T18:00:00.000Z",
    "dateReserved": "2019-01-10T00:00:00.000Z",
    "dateUpdated": "2024-08-04T20:09:23.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

JVNDB-2019-000004

Vulnerability from jvndb - Published: 2019-01-31 06:46 - Updated:2019-09-26 09:08

Severity

7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL may insecurely load Dynamic Link Libraries

Details

UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL provided by Micco contain vulnerabilities listed below. * Self-Extracting Archives created by UNLHA32.DLL may insecurely load Dynamic Link Libraries (CWE-427) - CVE-2018-16189 * Insecurely load specific DLL file in the same directory (CWE-427) - CVE-2018-16190 Eili Masami reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN52168232/index.html
	JVN	https://jvn.jp/en/ta/JVNTA91240916/
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16189
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16190
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-16189
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-16190
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	Micco	LHMelting for Win32
	Micco	LMLzh32.DLL
	Micco	UNARJ32.DLL for Win32
	Micco	UNLHA32.DLL for Win32

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000004.html",
  "dc:date": "2019-09-26T18:08+09:00",
  "dcterms:issued": "2019-01-31T15:46+09:00",
  "dcterms:modified": "2019-09-26T18:08+09:00",
  "description": "UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL provided by Micco contain vulnerabilities listed below.\r\n* Self-Extracting Archives created by UNLHA32.DLL may insecurely load Dynamic Link Libraries (CWE-427) - CVE-2018-16189\r\n* Insecurely load specific DLL file in the same directory (CWE-427) - CVE-2018-16190\r\n\r\nEili Masami reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000004.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:micco:lhmelting",
      "@product": "LHMelting for Win32",
      "@vendor": "Micco",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:micco:micco_lmlzh32dll",
      "@product": "LMLzh32.DLL",
      "@vendor": "Micco",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:micco:unarj32.dll",
      "@product": "UNARJ32.DLL for Win32",
      "@vendor": "Micco",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:micco:unlha32.dll",
      "@product": "UNLHA32.DLL for Win32",
      "@vendor": "Micco",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2019-000004",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN52168232/index.html",
      "@id": "JVN#52168232",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16189",
      "@id": "CVE-2018-16189",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16190",
      "@id": "CVE-2018-16190",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-16189",
      "@id": "CVE-2018-16189",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-16190",
      "@id": "CVE-2018-16190",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL may insecurely load Dynamic Link Libraries"
}

JVNDB-2019-000005

Vulnerability from jvndb - Published: 2019-01-31 06:35 - Updated:2019-08-28 03:08

Severity

7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting may insecurely load Dynamic Link Libraries

Details

The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting provided by Micco use the old version of Self-Extracting Archives created by UNLHA32.DLL. They contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427, CVE-2018-16189). Eili Masami reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN83826673/index.html
	JVN	https://jvn.jp/en/jp/JVN52168232/index.html
	JVN	https://jvn.jp/en/ta/JVNTA91240916/
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5911
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5912
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5913
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-5911
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-5912
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-5913
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	Micco	LHMelting for Win32
	Micco	UNARJ32.DLL for Win32
	Micco	UNLHA32.DLL for Win32

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000005.html",
  "dc:date": "2019-08-28T12:08+09:00",
  "dcterms:issued": "2019-01-31T15:35+09:00",
  "dcterms:modified": "2019-08-28T12:08+09:00",
  "description": "The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting provided by Micco use the old version of Self-Extracting Archives created by UNLHA32.DLL.\r\nThey contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427, CVE-2018-16189).\r\n\r\nEili Masami reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000005.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:micco:lhmelting",
      "@product": "LHMelting for Win32",
      "@vendor": "Micco",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:micco:unarj32.dll",
      "@product": "UNARJ32.DLL for Win32",
      "@vendor": "Micco",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:micco:unlha32.dll",
      "@product": "UNLHA32.DLL for Win32",
      "@vendor": "Micco",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2019-000005",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN83826673/index.html",
      "@id": "JVN#83826673",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/jp/JVN52168232/index.html",
      "@id": "JVN#52168232",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5911",
      "@id": "CVE-2019-5911",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5912",
      "@id": "CVE-2019-5912",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5913",
      "@id": "CVE-2019-5913",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5911",
      "@id": "CVE-2019-5911",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5912",
      "@id": "CVE-2019-5912",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5913",
      "@id": "CVE-2019-5913",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting may insecurely load Dynamic Link Libraries"
}

Find a vulnerability

Search criteria

12 vulnerabilities by micco

CVE-2019-5913 (GCVE-0-2019-5913)

CVE-2019-5912 (GCVE-0-2019-5912)

CVE-2019-5911 (GCVE-0-2019-5911)

CVE-2018-16190 (GCVE-0-2018-16190)

CVE-2018-16189 (GCVE-0-2018-16189)

CVE-2019-5911 (GCVE-0-2019-5911)

CVE-2018-16189 (GCVE-0-2018-16189)

CVE-2019-5913 (GCVE-0-2019-5913)

CVE-2018-16190 (GCVE-0-2018-16190)

CVE-2019-5912 (GCVE-0-2019-5912)

JVNDB-2019-000004

JVNDB-2019-000005