CVE-2010-3923

Опубликовано: 30 дек. 2010

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html

'CWE-426: Untrusted Search Path'

Ссылки

http://homepage2.nifty.com/hibara/software/atcs.htm
Patch
Vendor Advisory
http://jvn.jp/en/jp/JVN02175694/index.html
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html
http://secunia.com/advisories/42672
Vendor Advisory
http://homepage2.nifty.com/hibara/software/atcs.htm
Patch
Vendor Advisory
http://jvn.jp/en/jp/JVN02175694/index.html
http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html
http://secunia.com/advisories/42672
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:*:*:*:*:*:*:*:*

Версия до 2.69 (включая)

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.01:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.02:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.03:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.04:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.05:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.06:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:0.07:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.00:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.01:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.02:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.03:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.04:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.05:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.06:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.07:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.08:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.09:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.10:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.11:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.12:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.20:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.21:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.22:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.23:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.24:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.25:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.30:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.31:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.32:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.33:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.34:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.35:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.36:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.37:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.38:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.39:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.40:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.41:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.42:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.43:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.44:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.45:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.46:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:1.091:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.00:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.01:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.02:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.03:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.04:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.05:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.06:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.07:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.08:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.09:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.10:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.11:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.12:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.13:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.14:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.15:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.16:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.17:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.18:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.20:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.21:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.22:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.23:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.24:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.25:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.26:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.27:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.28:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.30:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.31:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.32:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.33:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.34:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.35:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.36:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.37:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.38:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.40:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.41:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.42:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.43:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.44:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.45:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.46:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.47:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.48:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.49:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.50:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.51:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.52:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.53:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.54:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.55:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.56:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.57:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.58:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.60:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.61:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.62:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.63:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.64:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.65:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.66:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.67:*:*:*:*:*:*:*

cpe:2.3:a:mitsu_hiro_hi_rose:attachecase:2.68:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00053

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-h3fj-j9x4-j55p

github

больше 3 лет назад