Lucene search

K
cve[email protected]CVE-2012-3841
HistoryJul 03, 2012 - 10:55 p.m.

CVE-2012-3841

2012-07-0322:55:02
web.nvd.nist.gov
26
vulnerability
kmplayer
local users
arbitrary code
dll hijacking
trojan horse
ehtrace.dll
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.8%

Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ehtrace.dll that is located in the current working directory.

Affected configurations

NVD
Node
kmplayerkmplayerMatch3.2.0.19
CPENameOperatorVersion
kmplayer:kmplayerkmplayereq3.2.0.19

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.8%

Related for CVE-2012-3841