CVE:CVE-2016-4902
CNNVD:CNNVD-201610-900
J-LIS JPKI是日本Japan Agency for Local Authority Information Systems（J-LIS）公司的一套基于PKI（公钥基础设施）平台的个人公开认证服务软件。该软件支持查看自签名证书、验证数字签名等。Client Software是其中的客户端软件。
J-LIS JPKI中的Client Software存在不可信的搜索路径漏洞。远程攻击者可借助目录下恶意的DLL利用该漏洞获取权限。以下版本受到影响：JPKI (for Windows 7及之后的版本) 3.0.1及之后的版本，JPKI (for Windows Vista) 3.0.1及之前的版本，JPK 2.6及之前的版本。
solution:Upgrade jpki the_public_certification_service_for_individuals to a higher version than 2.6,and avoid the version (,2.6]; Upgrade jpki the_public_certification_service_for_individuals_for_windows_7 to a higher version than 3.0.1,and avoid the version (,3.0.1]; Upgrade jpki the_public_certification_service_for_individuals_for_windows_vista to a higher version than 3.0.1,and avoid the version (,3.0.1]