Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1185
cve-2005-1185
unquoted search path vulnerability
musicmatch jukebox
privilege escalation
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Unquoted Windows search path vulnerability in Musicmatch Jukebox 10.00.2047 and earlier allows local users to gain privileges via a malicious C:\program.exe file, which is run by MMFWLaunch.exe when it attempts to execute launch.exe.
Affected configurations
Node
musicmatchjukeboxRange≤10.00.2047
| CPE | Name | Operator | Version |
|---|---|---|---|
| musicmatch:jukebox | musicmatch jukebox | le | 10.00.2047 |
Related
cvelist
cvelist
CVE-2005-1185
2005-04-19 04:00:00
nvd
nvd
CVE-2005-1185
2005-05-02 04:00:00
nessus
nessus
MusicMatch < 9.0.5066 / 10.0.2048 Multiple Vulnerabilities
2005-04-14 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2005-1185