Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-1805

Опубликовано: 10 сент. 2010
Источник: nvd
CVSS2: 6.9
EPSS Низкий

Описание

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:4.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:5.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:5.0.1:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.00053
Низкий

6.9 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 15 лет назад

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.

debian
больше 15 лет назад

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 a ...

github
больше 3 лет назад

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.

EPSS

Процентиль: 16%
0.00053
Низкий

6.9 Medium

CVSS2

Дефекты

CWE-264