Lucene search

K
cveMitreCVE-2014-9600
HistoryJan 16, 2015 - 3:59 p.m.

CVE-2014-9600

2015-01-1615:59:01
mitre
web.nvd.nist.gov
29
cve-2014-9600
macroplant iexplorer
vulnerability
local users
arbitrary code
dll hijacking
itunesmobiledevice.dll

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0

Percentile

5.1%

Untrusted search path vulnerability in Macroplant iExplorer 3.6.3.0 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse itunesmobiledevice.dll.

Affected configurations

Nvd
Node
macroplantiexplorerMatch3.6.3.0
VendorProductVersionCPE
macroplantiexplorer3.6.3.0cpe:2.3:a:macroplant:iexplorer:3.6.3.0:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2014-9600