Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-4866

Опубликовано: 06 сент. 2012
Источник: nvd
CVSS2: 6.9
EPSS Низкий

Описание

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party information.

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426 Untrusted Search Path'

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:xtremerat:xtremerat:3.5:*:*:*:*:*:*:*

EPSS

Процентиль: 28%
0.00098
Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
больше 3 лет назад

Untrusted search path vulnerability in Xtreme RAT 3.5 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as the current working directory. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 28%
0.00098
Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other