Lucene search

K
cveFlexeraCVE-2013-3248
HistoryOct 03, 2013 - 11:55 p.m.

CVE-2013-3248

2013-10-0323:55:04
flexera
web.nvd.nist.gov
98
cve-2013-3248
untrusted search path vulnerability
corel pdf fusion
local users
privilege escalation

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.005

Percentile

77.6%

Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a directory that contains a .pdf or .xps file.

Affected configurations

Nvd
Node
corelpdf_fusionMatch1.11
VendorProductVersionCPE
corelpdf_fusion1.11cpe:2.3:a:corel:pdf_fusion:1.11:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.005

Percentile

77.6%