Lucene search

K
cveMitreCVE-2010-5268
HistorySep 07, 2012 - 10:32 a.m.

CVE-2010-5268

2012-09-0710:32:23
mitre
web.nvd.nist.gov
20
cve-2010-5268
amazon kindle
pc
vulnerability
local users
privileges
wintab32.dll
trojan horse

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

Untrusted search path vulnerability in Amazon Kindle for PC 1.3.0 30884 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .azw file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
amazonkindle_for_pcMatch1.3.0.30884
VendorProductVersionCPE
amazonkindle_for_pc1.3.0.30884cpe:2.3:a:amazon:kindle_for_pc:1.3.0.30884:*:*:*:*:*:*:*

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2010-5268