CVE-2010-5234

Severity Score

6.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse (1) MFC90ENU.DLL or (2) MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Múltiples vulnerabilidades de ruta de búsqueda no confiable en Camtasia Studio v7.0.1 build 57 permite a usuarios locales obtener privilegios a través de un troyano (1) MFC90ENU.DLL o (2) Archivo MFC90LOC.DLL en el directorio de trabajo actual, como lo demuestra un directorio que contiene una. CMMP o camrec. archivo. NOTA: el origen de esta información es desconocida, los datos se obtienen exclusivamente a partir de información de terceros.

*Credits: N/A

CVSS Scores

NISTv2 6.9

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-09-07 CVE Reserved
2012-09-07 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/41119	2012-09-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Techsmith Search vendor "Techsmith"		Camtasia Studio Search vendor "Techsmith" for product "Camtasia Studio"				7.0.1 Search vendor "Techsmith" for product "Camtasia Studio" and version "7.0.1"		-		Affected