Lucene search

[email protected]CVE-2010-5224

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-5224

2022-10-0316:21:03

[email protected]

web.nvd.nist.gov

cve-2010-5224

untrusted search path

vulnerability

cool iphone ringtone maker

local users

privileges

trojan horse

dwmapi.dll

nvd

security

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in Cool iPhone Ringtone Maker 2.2.3 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .mp3 file. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

coolrecordeditcool_iphone_ringtone_makerMatch2.2.3

CPENameOperatorVersion
coolrecordedit:cool_iphone_ringtone_makercoolrecordedit cool iphone ringtone makereq2.2.3

CPE	Name	Operator	Version
coolrecordedit:cool_iphone_ringtone_maker	coolrecordedit cool iphone ringtone maker	eq	2.2.3

References

packetstormsecurity.org/1010-exploits/cooliphoneringtone-dllhijack.txt

secunia.com/advisories/41910

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-5224

nvd1 cvelist1 prion1