CVE-2012-2753

Published: Jun 19, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected (10)

Products: Checkpoint: Endpoint Connect, Endpoint Security, Endpoint Security Vpn, Remote Access Clients

Checkpoint

4 products

Endpoint Connect

Endpoint Security

Endpoint Security Vpn

Remote Access Clients

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Endpoint Connect	Version r73
Checkpoint Endpoint Security	Version e80.10
Checkpoint Endpoint Security	Version e80.20
Checkpoint Endpoint Security	Version e80.30
Checkpoint Endpoint Security	Version e80
Checkpoint Endpoint Security	Version r73
Checkpoint Endpoint Security Vpn	Version r75
Checkpoint Remote Access Clients	Version e75.10
Checkpoint Remote Access Clients	Version e75.20
Checkpoint Remote Access Clients	Version e75

References (4)

http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html

Source: cve@mitre.org

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2012-06/0069.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk76480

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.