CVE-2010-5211

{"id": "CVE-2010-5211", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-09-06T10:41:55.753", "references": [{"url": "http://core.yehg.net/lab/pr0js/advisories/dll_hijacking/%5Balsee%5D_6.20.0.1_insecure_dll_hijacking", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/41415", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Untrusted search path vulnerability in ALSee 6.20.0.1 allows local users to gain privileges via a Trojan horse patchani.dll file in the current working directory, as demonstrated by a directory that contains a .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, or .tiff file. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnerabilidad de ruta de b\u00fasqueda no confiable en ALSee v6.20.0.1, permite a usuarios locales ganar privilegios a trav\u00e9s de un archivo de caballo de troya patchani.dll en el directorio de trabajo actual, como se demostr\u00f3 con un directorio que contiene un archivo .ani, .bmp, .cal, .hdp, .jpe, .mac, .pbm, .pcx, .pgm, .png, .psd, .ras, .tga, o .tiff. NOTA: algunos de estos datos han sido obtenidos a partir de informaci\u00f3n de terceros."}], "lastModified": "2012-09-06T10:41:55.753", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:estsoft:alsee:6.20.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80CCB2AD-7537-486A-8C8D-5248C129A4E5"}], "operator": "OR"}]}], "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426 Untrusted Search Path'", "sourceIdentifier": "cve@mitre.org"}