Lucene search

MitreCVE-2012-4880

HistorySep 07, 2012 - 10:32 a.m.

CVE-2012-4880

2012-09-0710:32:24

mitre

web.nvd.nist.gov

cve-2012-4880

dvd architect pro

dvd architect studio

untrusted search path

vulnerability

local privileges

trojan horse

enc_mp2v.200

cfhddecoder.dll

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

25.7%

JSON

Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse (1) enc_mp2v.200 or (2) CFHDDecoder.dll file in the current working directory, as demonstrated by a directory that contains a .dar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

sonydvd_architect_proMatch5.2

sonydvd_architect_studioMatch5.0

VendorProductVersionCPE
sonydvd_architect_pro5.2cpe:2.3:a:sony:dvd_architect_pro:5.2:*:*:*:*:*:*:*
sonydvd_architect_studio5.0cpe:2.3:a:sony:dvd_architect_studio:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sony	dvd_architect_pro	5.2	cpe:2.3:a:sony:dvd_architect_pro:5.2:::::::*
sony	dvd_architect_studio	5.0	cpe:2.3:a:sony:dvd_architect_studio:5.0:::::::*

References

secunia.com/advisories/47282

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

25.7%

JSON

Related for CVE-2012-4880