exploitDog

CVE-2012-1849

Опубликовано: 12 июн. 2012

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html

'CWE-426: Untrusted Search Path'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:lync:2010:*:attendant_x64:*:*:*:*:*

cpe:2.3:a:microsoft:lync:2010:*:attendant_x86:*:*:*:*:*

cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*

cpe:2.3:a:microsoft:lync:2010:*:x64:*:*:*:*:*

cpe:2.3:a:microsoft:lync:2010:*:x86:*:*:*:*:*

EPSS

Процентиль: 98%

0.59138

Средний

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4wgv-p49g-987m

github

больше 3 лет назад

Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."

EPSS

Процентиль: 98%

0.59138

Средний

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other