CVE-2010-3165
6.9
Vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 3.4 / Impact: 10.0
Source: NVD
Description
Untrusted search path vulnerability in Yokka NoEditor 1.33.1.1 and earlier, OuiEditor 1.6.1.1 and earlier, UnEditor 1.10.1.2 and earlier, DeuxEditor 1.7.1.2 and earlier, SQLEditorXP 3.14.1.2 and earlier, SQLEditorTE 1.9.1.3 and earlier, SQLEditor8 3.8.1.2 and earlier, and SQLEditorClassic 1.8.1.3 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
Affected (8)
Products: Yokkasoft: Deuxeditor, Noeditor, Ouieditor, Sqleditor8, Sqleditorclassic, Sqleditorte, Sqleditorxp, Uneditor
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version ≤ 1.7.1.2 | |
| version ≤ 1.33.1.1 | |
| version ≤ 1.6.1.1 | |
| version ≤ 3.8.1.2 | |
| version ≤ 1.8.1.3 | |
| version ≤ 1.9.1.3 | |
| version ≤ 3.14.1.2 | |
| version ≤ 1.10.1.2 |
References (4)
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.