CVE-2017-2154: Justsystems Hanako

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Justsystems Hanako: version 2015 only; version 2016 only; version 2017 only
• Justsystems Hanako Police: version 5 only
• Justsystems Hanako Pro: version 3 only
• Justsystems Just Frontier: version 3 only
• Justsystems Just Government: version 3 only
• Justsystems Just Jump Class: version 2 only
• Justsystems Just Office: version 3 only
• Justsystems Just Police: version 3 only
• Justsystems Just School: version 6 only

Published 2017-04-28. Last modified 2026-06-17.