Lucene search

[email protected]CVE-2010-5261

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-5261

2022-10-0316:21:02

[email protected]

web.nvd.nist.gov

cve-2010-5261

untrusted search path vulnerability

snowfox total video converter 2.5.1

local users

privileges

dwmapi.dll

nvd

vulnerability

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in SnowFox Total Video Converter 2.5.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .avi file. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

snowfoxsoftsnowfox_total_video_converterMatch2.5.1

CPENameOperatorVersion
snowfoxsoft:snowfox_total_video_convertersnowfoxsoft snowfox total video convertereq2.5.1

CPE	Name	Operator	Version
snowfoxsoft:snowfox_total_video_converter	snowfoxsoft snowfox total video converter	eq	2.5.1

References

secunia.com/advisories/41527

www.exploit-db.com/dll-hijacking-vulnerable-applications/

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-5261

nvd1 prion1 cvelist1