Vulnerability in DLL Loading in RakurakuMusen Start EX

Number: NV25-007
CVE: CVE-2025-12852

Overview

The Aterm-bundled software “RakurakuMusen Start EX” contains a vulnerability related to DLL loading (CVE-2025-12852). An attacker could manipulate the PC environment to cause unintended operations on the user's device.

Products Affected

RakurakuMusen Start EX

Affected Version

All versions
(This product is a tool for Windows XP/Vista/7/8/10)

Solution

Please refer to the following page. (Only Japanese)
https://www.aterm.jp/support/tech/2025/1119.html

References

CVE-2025-12852
https://www.cve.org/CVERecord?id=CVE-2025-12852

Credit

reported by Kohei Kuroda for NEC-PSIRT

Update

2025/11/19: First edition

サイト内の現在位置