Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Installer of Yahoo! Toolbar by Yahoo Japan Corporation

    JVNDB-2017-000173

    Vulnerability from jvndb - Published: 2017-07-12 14:42 - Updated:2018-02-07 16:48
    Severity
    Summary
    Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries
    Details
    Installer of Yahoo! Toolbar (for Internet explorer) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000173.html",
      "dc:date": "2018-02-07T16:48+09:00",
      "dcterms:issued": "2017-07-12T14:42+09:00",
      "dcterms:modified": "2018-02-07T16:48+09:00",
      "description": "Installer of Yahoo! Toolbar (for Internet explorer) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nYuji Tounai of NTT Communications Corporation reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000173.html",
      "sec:cpe": {
        "#text": "cpe:/a:misc:yahoo_japan_yahoo_toolbar",
        "@product": "Installer of Yahoo! Toolbar",
        "@vendor": "Yahoo Japan Corporation",
        "@version": "2.2"
      },
      "sec:cvss": [
        {
          "@score": "6.8",
          "@severity": "Medium",
          "@type": "Base",
          "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "@version": "2.0"
        },
        {
          "@score": "7.8",
          "@severity": "High",
          "@type": "Base",
          "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "@version": "3.0"
        }
      ],
      "sec:identifier": "JVNDB-2017-000173",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/jp/JVN02852421/index.html",
          "@id": "JVN#02852421",
          "@source": "JVN"
        },
        {
          "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
          "@id": "JVNTA#91240916",
          "@source": "JVN"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2253",
          "@id": "CVE-2017-2253",
          "@source": "CVE"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2253",
          "@id": "CVE-2017-2253",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-Other",
          "@title": "No Mapping(CWE-Other)"
        }
      ],
      "title": "Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries"
    }

    JVNDB-2012-000072

    Vulnerability from jvndb - Published: 2012-07-30 14:56 - Updated:2012-08-02 16:33
    Severity
    N/A (UNKNOWN) - -
    Summary
    Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
    Details
    Yahoo! Toolbar (for Chrome, Safari) contains a vulnerability where the toolbar may be altered. Yahoo! Toolbar (for Chrome, Safari) contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000072.html",
      "dc:date": "2012-08-02T16:33+09:00",
      "dcterms:issued": "2012-07-30T14:56+09:00",
      "dcterms:modified": "2012-08-02T16:33+09:00",
      "description": "Yahoo! Toolbar (for Chrome, Safari) contains a vulnerability where the toolbar may be altered.\r\n\r\nYahoo! Toolbar (for Chrome, Safari) contains a vulnerability where the toolbar may be altered when visiting a specially crafted web page.\r\n\r\nKeita Haga of keitahaga.com reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000072.html",
      "sec:cpe": {
        "#text": "cpe:/a:misc:yahoo_japan_yahoo_toolbar",
        "@product": "Installer of Yahoo! Toolbar",
        "@vendor": "Yahoo Japan Corporation",
        "@version": "2.2"
      },
      "sec:cvss": {
        "@score": "4.3",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2012-000072",
      "sec:references": [
        {
          "#text": "http://jvn.jp/en/jp/JVN51769987/",
          "@id": "JVN#51769987",
          "@source": "JVN"
        },
        {
          "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2647",
          "@id": "CVE-2012-2647",
          "@source": "CVE"
        },
        {
          "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-2647",
          "@id": "CVE-2012-2647",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-Other",
          "@title": "No Mapping(CWE-Other)"
        }
      ],
      "title": "Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration"
    }