Lucene search

MitreCVE-2010-5204

HistorySep 06, 2012 - 10:41 a.m.

CVE-2010-5204

2012-09-0610:41:55

mitre

web.nvd.nist.gov

cve-2010-5204

ibm lotus symphony

untrusted search path

privilege escalation

dll files

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

25.7%

JSON

Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2) emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw, .sxg, or .sxw file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

ibmlotus_symphonyMatch1.3.0.20090908.0900

VendorProductVersionCPE
ibmlotus_symphony1.3.0.20090908.0900cpe:2.3:a:ibm:lotus_symphony:1.3.0.20090908.0900:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	lotus_symphony	1.3.0.20090908.0900	cpe:2.3:a:ibm:lotus_symphony:1.3.0.20090908.0900:::::::*

References

core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Bibm_lotus_symphony%5D_3-beta-4_insecure_dll_hijacking

secunia.com/advisories/41400

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

25.7%

JSON

Related for CVE-2010-5204