// For flags

CVE-2010-5242

 

Severity Score

6.9
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Untrusted search path vulnerability in Sound Forge Pro 10.0b Build 474 allows local users to gain privileges via a Trojan horse MtxParhVegasPreview.dll file in the current working directory, as demonstrated by a directory that contains a .sfw file. NOTE: some of these details are obtained from third party information.

Vulnerabilidad de path de búsqueda no confiable en Sound Forge Pro v10.0b Build 474, permite a usuario locales obtener privilegios a través de un fichero MtxParhVegasPreview.dll troyanizado en el directorio de trabajo actual, como se demostró mediante un directorio que contenía un fichero .sfw. NOTA: Algunos de estos detalles se han obtenido de terceros.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-09-07 CVE Reserved
  • 2012-09-07 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sony
Search vendor "Sony"
 Sound Forge
Search vendor "Sony" for product "Sound Forge"
 10.0
Search vendor "Sony" for product "Sound Forge" and version "10.0"
b, pro
Affected