// For flags

CVE-2010-5243

 

Severity Score

7.3
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple untrusted search path vulnerabilities in Cyberlink Power2Go 7.0.0.0816 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) MFC71LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .p2g, .iso, .pdl, .pds, or .p2i file. NOTE: some of these details are obtained from third party information.

Múltiples vulnerabilidades de path de búsqueda no confiable en Cyberlink Power2Go v7.0.0.0816, permite a usuario locales obtener privilegios a través de un fichero (1) dwmapi.dll o (2) MFC71LOC.DLL troyanizados en el directorio de trabajo actual, como se demostró mediante un directorio que contenía un fichero .p2g, .iso, .pdl, .pds, o .p2i. NOTA: Algunos de estos detalles se han obtenido de terceros.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-09-07 CVE Reserved
  • 2012-09-07 CVE Published
  • 2024-02-03 EPSS Updated
  • 2024-09-16 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cyberlink
Search vendor "Cyberlink"
 Power2go
Search vendor "Cyberlink" for product "Power2go"
 7.0.0.0816
Search vendor "Cyberlink" for product "Power2go" and version "7.0.0.0816"
-
Affected