Lucene search

MitreCVE-2010-5270

HistorySep 07, 2012 - 10:32 a.m.

CVE-2010-5270

2012-09-0710:32:23

mitre

web.nvd.nist.gov

cve

adobe

device central cs4

security

vulnerability

privileges

trojan horse

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

42.3%

JSON

Multiple untrusted search path vulnerabilities in Adobe Device Central CS4 2.0.0 0476 allow local users to gain privileges via a Trojan horse (1) ibfs32.dll or (2) amt_cdb.dll file in the current working directory, as demonstrated by a directory that contains a .adcp file. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

adobedevice_central_cs4Match2.0.0

VendorProductVersionCPE
adobedevice_central_cs42.0.0cpe:2.3:a:adobe:device_central_cs4:2.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	device_central_cs4	2.0.0	cpe:2.3:a:adobe:device_central_cs4:2.0.0:::::::*

References

secunia.com/advisories/42525

www.coresecurity.com/content/adobe-device-central-cs4-ibfs32-dll-hijacking-exploit-10-5

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

42.3%

JSON

Related for CVE-2010-5270