Lucene search

K
jvnJapan Vulnerability NotesJVN:48097065
HistoryOct 21, 2010 - 12:00 a.m.

JVN#48097065: TeraPad may insecurely load dynamic libraries

2010-10-2100:00:00
Japan Vulnerability Notes
jvn.jp
20

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

TeraPad is a text editor. TeraPad loads certain DLL’s when TXT files are opened. TeraPad contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries.

Impact

An attacker may execute arbitrary code with the privilege of running the application.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • TeraPad Ver.0.93 and earlier

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0

Percentile

5.1%

Related for JVN:48097065