CVE-2017-2215: Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (...

Security readout for executives and security teams

CVE-2017-2215 affects an old National Tax Agency e-Tax preparation installer, jizen_setup.exe, available before June 12, 2017. If run in an unsafe location, it could load a malicious DLL and give an attacker higher privileges. Exposure is likely limited to retained or reused legacy installer copies. Organizations are mainly exposed if they still store, distribute, or execute the pre-June 12, 2017 jizen_setup.exe installer, especially from user-writable folders or shared locations. Current systems are not shown as affected unless they rely on that legacy installer. Treat this as a cleanup and legacy-software control issue unless the old installer is still in use. Priority rises where tax-preparation workflows depend on archived installers or shared software repositories. Mitigation focus: Locate and remove old copies of jizen_setup.exe from endpoints and file shares.; Obtain replacement installers only from official National Tax Agency or e-Tax guidance.; Restrict execution of installers from user-writable and shared directories..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.