KLA10376 ACE vulnerability in UltraEdit

An untrusted path vulnerability was found in UltraEdit. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely via a library hijack.

Original advisories

Related products

UltraEdit

CVE list

CVE-2010-3402 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• IDM Computer Solutions UltraEdit versions 16.20.0.1009 and 16.10.0.1036