Lucene search

K
cve[email protected]CVE-2010-0532
HistoryMar 31, 2010 - 6:30 p.m.

CVE-2010-0532

2010-03-3118:30:00
CWE-362
web.nvd.nist.gov
30
cve-2010-0532
race condition
apple itunes
installer
local privilege escalation
windows
nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse.

Affected configurations

NVD
Node
appleitunesRange9.0.3-windows
OR
appleitunesMatch9.0-windows
OR
appleitunesMatch9.0.0-windows
OR
appleitunesMatch9.0.1-windows
OR
appleitunesMatch9.0.2-windows
AND
microsoftwindows_7
OR
microsoftwindows_vista
OR
microsoftwindows_xp

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%