exploitDog

CVE-2015-0978

Опубликовано: 14 мар. 2015

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap CVE-2015-2264.

Комментарий

CWE-426: Untrusted Search Path

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-15-069-04A
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-069-04A
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elipse:e3:4.5:*:*:*:*:*:*:*

cpe:2.3:a:elipse:e3:4.6:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.0009

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mgf3-9wqj-vrvh

github

больше 3 лет назад

Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap CVE-2015-2264.

EPSS

Процентиль: 26%

0.0009

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other