Lucene search

K
cve[email protected]CVE-2010-3402
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3402

2022-10-0316:20:56
web.nvd.nist.gov
27
cve-2010-3402
untrusted search path
idm ultraedit
arbitrary code execution
dll hijacking
vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

Untrusted search path vulnerability in IDM Computer Solutions UltraEdit 16.20.0.1009, 16.10.0.1036, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a bin, cpp, css, c, dat, hpp, html, h, ini, java, log, mak, php, prj, txt, or xml file.

Affected configurations

NVD
Node
ultraeditultraeditMatch16.10.0.1036
OR
ultraeditultraeditMatch16.20.0.1009

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

Related for CVE-2010-3402