Lucene search

[email protected]CVE-2010-5217

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-5217

2022-10-0316:21:02

[email protected]

web.nvd.nist.gov

cve

untrusted search path

vulnerability

tuneup utilities

privilege escalation

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.8%

JSON

Multiple untrusted search path vulnerabilities in TuneUp Utilities 2009 8.0.3310 and 2010 9.0.4600 allow local users to gain privileges via a Trojan horse (1) wscapi.dll or (2) vclib32.dll file in the current working directory, as demonstrated by a directory that contains a .tvs file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

tuneuptuneup_utilities_2009Match8.0.3310

tuneuptuneup_utilities_2010Match9.0.4600

CPENameOperatorVersion
tuneup:tuneup_utilities_2009tuneup tuneup utilities 2009eq8.0.3310
tuneup:tuneup_utilities_2010tuneup tuneup utilities 2010eq9.0.4600

CPE	Name	Operator	Version
tuneup:tuneup_utilities_2009	tuneup tuneup utilities 2009	eq	8.0.3310
tuneup:tuneup_utilities_2010	tuneup tuneup utilities 2010	eq	9.0.4600

References

secunia.com/advisories/41575

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.8%

JSON

Related for CVE-2010-5217

nvd1 prion1 cvelist1