Lucene search

K
kasperskyKaspersky LabKLA10099
HistorySep 07, 2012 - 12:00 a.m.

KLA10099 LPE vulnerability in Camtasia Studio

2012-09-0700:00:00
Kaspersky Lab
threats.kaspersky.com
26

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

An untrusted path vulnerability was found in Camtasia Studio. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via DLL hijacking.

Original advisories

Related products

Camtasia-Studio

CVE list

CVE-2010-5234 high

Solution

Update to latest version

Impacts

  • PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

  • Camtasia Studio version 7.0.1 build 57

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

Related for KLA10099