exploitDog

CVE-2009-5118

Опубликовано: 22 авг. 2012

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share.

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html

'CWE-426 Untrusted Search Path'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:virusscan_enterprise:*:*:*:*:*:*:*:*

Версия до 8.5i (включая)

cpe:2.3:a:mcafee:virusscan_enterprise:8.0i:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:virusscan_enterprise:8.0i:p11:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00724

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2fvm-hcc8-v9vr

github

больше 3 лет назад

Untrusted search path vulnerability in McAfee VirusScan Enterprise before 8.7i allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, as demonstrated by scanning a document located on a remote share.

EPSS

Процентиль: 72%

0.00724

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other