Lucene search

K
cve[email protected]CVE-2012-1242
HistoryApr 27, 2012 - 6:55 p.m.

CVE-2012-1242

2012-04-2718:55:00
web.nvd.nist.gov
27
cve-2012-1242
untrusted search path
justsystems
ichitaro
local privilege escalation
vulnerability

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, and oreplug allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected configurations

NVD
Node
justsystemsichitaroMatch2006
OR
justsystemsichitaroMatch2006-government
OR
justsystemsichitaroMatch2007
OR
justsystemsichitaroMatch2007-government
OR
justsystemsichitaroMatch2008
OR
justsystemsichitaroMatch2008-government
OR
justsystemsichitaroMatch2009
OR
justsystemsichitaroMatch2009-government
OR
justsystemsichitaroMatch2010
OR
justsystemsichitaroMatch2010-government
OR
justsystemsichitaroMatch2011
OR
justsystemsichitaroMatch2011-sou
OR
justsystemsichitaro_portable_with_oreplugMatch-
OR
justsystemsichitaro_viewerMatch-
OR
justsystemsjust_frontierMatch-
OR
justsystemsjust_jumpMatch4
OR
justsystemsjust_schoolMatch-
OR
justsystemsjust_schoolMatch2009
OR
justsystemsjust_schoolMatch2010
OR
justsystemsoreplugMatch-

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2012-1242