Lucene search

K
jvnJapan Vulnerability NotesJVN:02175694
HistoryDec 17, 2010 - 12:00 a.m.

JVN#02175694: AttacheCase may insecurely load executable files

2010-12-1700:00:00
Japan Vulnerability Notes
jvn.jp
15

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

AttacheCase is a file encryption/decryption software. AttacheCase loads certain executables (.exe) when decrypting files, if certain settings are applied. AttacheCase contains an issue with the file search path, which may insecurely load executables.

Impact

An attacker may execute arbitrary code with the privilege of the running application.

Solution

Update the Software
Update to the software according to the information provided by the developer.

Fixed version

  • AttacheCase ver.2.70

Products Affected

  • AttacheCase ver.2.69 and earlier

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for JVN:02175694