Lucene search

[email protected]NVD:CVE-2010-5243

HistorySep 07, 2012 - 10:32 a.m.

CVE-2010-5243

2012-09-0710:32:21

[email protected]

web.nvd.nist.gov

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

25.7%

JSON

Multiple untrusted search path vulnerabilities in Cyberlink Power2Go 7.0.0.0816 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) MFC71LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .p2g, .iso, .pdl, .pds, or .p2i file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

cyberlinkpower2goMatch7.0.0.0816

VendorProductVersionCPE
cyberlinkpower2go7.0.0.0816cpe:2.3:a:cyberlink:power2go:7.0.0.0816:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cyberlink	power2go	7.0.0.0816	cpe:2.3:a:cyberlink:power2go:7.0.0.0816:::::::*

References

extraexploit.blogspot.com/2010/08/dll-hijacking-my-test-cases-on-default.html

secunia.com/advisories/41174

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

25.7%

JSON

Related for NVD:CVE-2010-5243

cvelist1 prion1 cve1