CVE-2011-2009

2011-10-1202:52:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2011-2009

untrusted search path

windows media center

microsoft windows vista

windows 7

trojan horse dll

insecure library loading vulnerability

6.3 Medium

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.4%

JSON

Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka “Media Center Insecure Library Loading Vulnerability.”

CPENameOperatorVersion
microsoft:windows_7microsoft windows 7eq-
microsoft:windows_vistamicrosoft windows vistaeq*
microsoft:windows_media_center_tv_packmicrosoft windows media center tv packeq*

CPE	Name	Operator	Version
microsoft:windows_7	microsoft windows 7	eq	-
microsoft:windows_vista	microsoft windows vista	eq	*
microsoft:windows_media_center_tv_pack	microsoft windows media center tv pack	eq	*