Lucene search
HistoryDec 30, 2011 - 7:55 p.m.
CVE-2011-5044
sopcast
weak permissions
arbitrary code execution
cve-2011-5044
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.0%
SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program.
Affected configurations
Node
sopcastsopcastMatch3.4.7.45585
| CPE | Name | Operator | Version |
|---|---|---|---|
| sopcast:sopcast | sopcast | eq | 3.4.7.45585 |
Related
prion
prion
Code injection
2011-12-30 19:55:00
cvelist
cvelist
CVE-2011-5044
2011-12-30 19:00:00
nvd
nvd
CVE-2011-5044
2011-12-30 19:55:01
zeroscience
zeroscience
SopCast 3.4.7 (Diagnose.exe) Improper Permissions
2011-12-05 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.0%
Related for CVE-2011-5044