Lucene search
HistoryNov 18, 2005 - 11:00 a.m.
CVE-2005-2938
cve-2005-2938
unquoted windows
search path vulnerability
itunes
ituneshelper.exe
privilege escalation
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
Affected configurations
Node
appleitunesMatch4.7.1.30
ORappleitunesMatch5.0windows
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:itunes | apple itunes | eq | 4.7.1.30 |
| apple:itunes | apple itunes | eq | 5.0 |
Related
nvd
nvd
CVE-2005-2938
2005-11-18 06:03:00
nessus
nessus
securityvulns
securityvulns
APPLE-SA-2005-11-15 iTunes 6 for Windows
2005-11-16 00:00:00
cvelist
cvelist
CVE-2005-2938
2005-11-18 11:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2005-2938