Lucene search

K
cveMitreCVE-2010-5220
HistorySep 06, 2012 - 10:41 a.m.

CVE-2010-5220

2012-09-0610:41:56
mitre
web.nvd.nist.gov
22
cve-2010-5220
meo encryption software
search path vulnerability
local privilege escalation
dwmapi.dll
trojan horse

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Untrusted search path vulnerability in MEO Encryption Software 2.02 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .meo or .cry file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
nchsoftwaremeo_encryption_softwareMatch2.02
VendorProductVersionCPE
nchsoftwaremeo_encryption_software2.02cpe:2.3:a:nchsoftware:meo_encryption_software:2.02:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2010-5220