Lucene search

K
jvnJapan Vulnerability NotesJVN:04665167
HistoryOct 15, 2010 - 12:00 a.m.

JVN#04665167: XacRett may insecurely load executable files

2010-10-1500:00:00
Japan Vulnerability Notes
jvn.jp
12

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.4%

XacRett is a file extraction software that supports many file formats. XacRett loads certain executables (.exe) when extracting files. XacRett contains an issue with the file search path, which may insecurely load executables.

Impact

An attacker may execute arbitrary code with the privilege of running the application.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • XacRett version #49 and earlier

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.4%

Related for JVN:04665167