Lucene search

K
cveMitreCVE-2010-5256
HistorySep 07, 2012 - 10:32 a.m.

CVE-2010-5256

2012-09-0710:32:22
mitre
web.nvd.nist.gov
20
cve-2010-5256
untrusted search path vulnerability
cdisplay 1.8.1
local users
gain privileges
trojan horse
trace32.dll

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Untrusted search path vulnerability in CDisplay 1.8.1 allows local users to gain privileges via a Trojan horse TRACE32.DLL file in the current working directory, as demonstrated by a directory that contains a .cba file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
cdisplaycdisplayMatch1.8.1
VendorProductVersionCPE
cdisplaycdisplay1.8.1cpe:2.3:a:cdisplay:cdisplay:1.8.1:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2010-5256