// For flags

CVE-2010-5241

Autodesk AutoCAD 2007 - 'color.dll' DLL Hijacking

Severity Score

6.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple untrusted search path vulnerabilities in Autodesk AutoCAD 2010 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) IBFS32.DLL file in the current working directory, as demonstrated by a directory that contains a .dwg file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Múltiples vulnerabilidades de path de búsqueda no confiable en Autodesk AutoCAD 2010, permite a usuario locales obtener privilegios a través de un fichero (1) dwmapi.dll o (2) IBFS32.DLL troyanizados en el directorio de trabajo actual, como se demostró mediante un directorio que contenía un fichero .dwg. NOTA: La procedencia de esta información es desconocida. Algunos de estos detalles se han obtenido de terceros.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-08-25 First Exploit
  • 2012-09-07 CVE Reserved
  • 2012-09-07 CVE Published
  • 2024-09-16 CVE Updated
  • 2024-09-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (2)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Autodesk
Search vendor "Autodesk"
Autocad
Search vendor "Autodesk" for product "Autocad"
2010
Search vendor "Autodesk" for product "Autocad" and version "2010"
-
Affected