Design/Logic Flaw

2012-09-0710:32:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Untrusted search path vulnerability in MunSoft Easy Office Recovery 1.1 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory, as demonstrated by a directory that contains a .doc, .xls, or .ppt file. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
easy_office_recoveryeq1.1

CPE	Name	Operator	Version
	easy_office_recovery	eq	1.1

References

packetstormsecurity.org/1009-exploits/seasyofficerecovery-dllhijack.txt

secunia.com/advisories/41584