Lucene search

K
cve[email protected]CVE-2011-5155
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5155

2022-10-0316:15:12
web.nvd.nist.gov
18
cve-2011-5155
untrusted search path
vulnerability
help & manual 5.5.1
build 1296
local users
privileges
trojan horse
ijl15.dll
directory
.hmxz
.hmxp
.hmskin
.hmx
.hm3
.hpj
.hlp
.chm file
nvd

6.3 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:C/A:N

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
helpandmanualhelp_\&_manualMatch5.5.1

6.3 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:C/A:N

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.1%

Related for CVE-2011-5155