Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-5155

Опубликовано: 06 сент. 2012
Источник: nvd
CVSS2: 6.3
EPSS Низкий

Описание

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of these details are obtained from third party information.

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:helpandmanual:help_\&_manual:5.5.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%
0.00167
Низкий

6.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
больше 3 лет назад

Untrusted search path vulnerability in Help & Manual 5.5.1 Build 1296 allows local users to gain privileges via a Trojan horse ijl15.dll file in the current working directory, as demonstrated by a directory that contains a .hmxz, .hmxp, .hmskin, .hmx, .hm3, .hpj, .hlp, or .chm file. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 38%
0.00167
Низкий

6.3 Medium

CVSS2

Дефекты

NVD-CWE-Other