CVE-2010-1819

Опубликовано: 27 дек. 2013

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Untrusted search path vulnerability in the Picture Viewer in Apple QuickTime before 7.6.8 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) CoreVideo.dll, (2) CoreGraphics.dll, or (3) CoreAudioToolbox.dll that is located in the same folder as a .pic image file.

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html

"CWE-426: Untrusted Search Path"

Ссылки

http://lists.apple.com/archives/security-announce/2010/Sep/msg00003.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT4339
Vendor Advisory
http://www.fortiguard.com/advisory/FGA-2010-46/
http://lists.apple.com/archives/security-announce/2010/Sep/msg00003.html
Patch
Vendor Advisory
http://support.apple.com/kb/HT4339
Vendor Advisory
http://www.fortiguard.com/advisory/FGA-2010-46/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*

Версия до 7.6.7 (включая)

cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.6.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.6.5:*:*:*:*:*:*:*

cpe:2.3:a:apple:quicktime:7.6.6:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03838

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mfp7-p55f-gxr5

github

больше 3 лет назад